VAR-201508-0388

Vulnerability from variot - Updated: 2023-12-18 12:51

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password. Supplementary information : CWE Vulnerability type by CWE-798: Use of Hard-coded Credentials ( Using hard-coded credentials ) Has been identified. GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom, USA. A security vulnerability exists in GarrettCom Magnum 6K and 10K Switches that allows a local attacker to exploit a vulnerability to bypass security restrictions and perform unauthorized operations. An attacker in physical proximity could exploit this vulnerability to gain access with the enablement of this privileged account and a known password

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201508-0388",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "magnum 6k",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 10k",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 10k",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k",
        "scope": null,
        "trust": 0.6,
        "vendor": "garrettcom",
        "version": null
      },
      {
        "model": "magnum 10k",
        "scope": null,
        "trust": 0.6,
        "vendor": "garrettcom",
        "version": null
      },
      {
        "model": "magnum 6k",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 10k",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6kq",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6km",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6kl",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6k8",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6k32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6k25",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6k16",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 10kt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 10kg",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.5"
      },
      {
        "model": "magnum 6kq",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6km",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6kl",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k8",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k32",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k25",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 6k16",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 10kt",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      },
      {
        "model": "magnum 10kg",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "garrettcom",
        "version": "4.5.6"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:garrettcom:magnum_6k_firmware:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.5.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:garrettcom:magnum_10k_firmware:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.5.5",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Ashish Kamble of Qualys Security and Eireann Leverett",
    "sources": [
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2015-3959",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.9,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Local",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 7.2,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "CVE-2015-3959",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 1.9,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.4,
            "id": "CNVD-2015-04090",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "LOW",
            "trust": 0.6,
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.9,
            "id": "VHN-81920",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2015-3959",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-04090",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201506-460",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-81920",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password. Supplementary information : CWE Vulnerability type by CWE-798: Use of Hard-coded Credentials ( Using hard-coded credentials ) Has been identified. GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom, USA. A security vulnerability exists in GarrettCom Magnum 6K and 10K Switches that allows a local attacker to exploit a vulnerability to bypass security restrictions and perform unauthorized operations. An attacker in physical proximity could exploit this vulnerability to gain access with the enablement of this privileged account and a known password",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-3959",
        "trust": 3.4
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-15-167-01",
        "trust": 2.8
      },
      {
        "db": "BID",
        "id": "75235",
        "trust": 2.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "id": "VAR-201508-0388",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      }
    ],
    "trust": 1.325
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      }
    ]
  },
  "last_update_date": "2023-12-18T12:51:40.774000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "MNS6K R456 Release Notes",
        "trust": 0.8,
        "url": "http://www.garrettcom.com/techsupport/mns6k_r456_release_notes.pdf"
      },
      {
        "title": "GarrettCom Magnum 6K and 10K Switches Local Security Bypass Vulnerability Patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/60143"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-Other",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.8,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-15-167-01"
      },
      {
        "trust": 2.3,
        "url": "http://www.securityfocus.com/bid/75235"
      },
      {
        "trust": 2.0,
        "url": "http://www.garrettcom.com/techsupport/mns6k_r456_release_notes.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3959"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3959"
      },
      {
        "trust": 0.3,
        "url": "http://www.garrettcom.com/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-06-29T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "date": "2015-08-04T00:00:00",
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "date": "2015-06-16T00:00:00",
        "db": "BID",
        "id": "75235"
      },
      {
        "date": "2015-08-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "date": "2015-08-04T01:59:04.407000",
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "date": "2015-06-24T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-06-30T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-04090"
      },
      {
        "date": "2016-12-06T00:00:00",
        "db": "VULHUB",
        "id": "VHN-81920"
      },
      {
        "date": "2015-06-16T00:00:00",
        "db": "BID",
        "id": "75235"
      },
      {
        "date": "2015-08-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      },
      {
        "date": "2016-12-06T03:01:34.977000",
        "db": "NVD",
        "id": "CVE-2015-3959"
      },
      {
        "date": "2015-08-04T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "BID",
        "id": "75235"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Belden GarrettCom Magnum 6K and  Magnum 10K Runs on the switch  MNS Vulnerabilities in which access rights can be obtained in firmware",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-003988"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "permissions and access control",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201506-460"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…