CVEvulnerability
CVE-2012-3014
7.7 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors.
Affected configurations
• garrettcom magnum managed networks software-6k (<= 4.3.1)
• garrettcom magnum managed networks software-6k 4.2
• garrettcom magnum managed networks software-6k 4.2.1
• garrettcom magnum managed networks software-6k 4.3.0
• garrettcom magnum managed networks software-6k secure 14.2
• garrettcom magnum managed networks software-6k secure 14.2.1
• garrettcom magnum managed networks software-6k secure 14.3.0
• garrettcom magnum managed networks software-6k secure 14.3.1
Related
Weakness · not in database (1)
References
- http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf US Government Resource
- http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf Vendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf US Government Resource