CVE Vulnerabilities

CVE-2014-2964

Published: Aug 15, 2014 | Modified: Aug 15, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

Affected Software

Name Vendor Start Version End Version
Aviator_700d Cobham - (including) - (including)
Aviator_700e Cobham - (including) - (including)

References