CVE-2014-2964 Hardcoded credentials in n/a
Hardcoded passwords in Cobham Aviator satellite terminals allow physically proximate attackers to gain privileges via serial line access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-2964?
CVE-2014-2964 is a medium-severity vulnerability in n/a, published on 15 Aug 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.
Which versions are affected by CVE-2014-2964?
It affects 2 products.
Products include Cobham Aviator 700d, Cobham Aviator 700e.
How do I fix CVE-2014-2964?
No fix has been published for CVE-2014-2964 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-2964 being exploited?
There is no known exploitation of CVE-2014-2964 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xm5x-mwvv-f4pq.