critical9.3
CVE-2014-0328
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging ph…
Impact
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cobham | Ailor 6110 Mini-C Gmdss | All versions |
| Cobham | Sailor 6006 Message Terminal | All versions |
| Cobham | Sailor 6222 Vhf | All versions |
| Cobham | Sailor 6300 Mf \/ Hf | All versions |