NVD

Id
29227  
Name
CVE-2014-0328  
Description
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-15  
Modified Date
2014-08-15  
Seq
2014-0328  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154876 29227 CVE-2014-0328 VU#179732  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14837 JVNDB-2014-003712 Cobham thraneLINK デバイスのファームウェアアップデート機能に脆弱性 Cobham thraneLINK デバイスのファームウェアアップデート機能には、脆弱性が存在します。 CVE-2014-0328 67729 CVE-2014-0328 29227 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003712.html 2014-08-07 2014-08-18 View