CVEvulnerability

CVE-2014-0328

9.3 HIGH Published 2014-08-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

Affected configurations

• cobham ailor 6110 mini-c gmdss • cobham sailor 6006 message terminal • cobham sailor 6222 vhf • cobham sailor 6300 mf \/ hf

References