VULNERABILITY INTELLIGENCE

CVE-2014-2964

CVSS score6.9 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2014-08-15

Last modified2026-06-17

CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource