VULNERABILITY INTELLIGENCE

CVE-2014-0328

CVSS score9.3 HIGH

EPSS probability2.76%

CISA KEVNot currently listed

Published2014-08-15

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource