PT-2014-3019

CVE-2013-6034

·

Published

2014-02-04

·

Updated

2014-02-04

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions GateHouse (affected versions not specified) Harris BGAN RF-7800B-VU204 Harris BGAN RF-7800B-DU204 Hughes Network Systems 9201 Hughes Network Systems 9450 Hughes Network Systems 9502 Inmarsat (affected versions not specified) Japan Radio JUE-250 Japan Radio JUE-500 Thuraya IP satellite terminals (affected versions not specified)
Description The issue concerns hardcoded credentials in the firmware of various satellite terminals, making it easier for attackers to gain unspecified login access.
Recommendations For Harris BGAN RF-7800B-VU204, consider changing the hardcoded credentials to unique, secure credentials. For Harris BGAN RF-7800B-DU204, consider changing the hardcoded credentials to unique, secure credentials. For Hughes Network Systems 9201, consider changing the hardcoded credentials to unique, secure credentials. For Hughes Network Systems 9450, consider changing the hardcoded credentials to unique, secure credentials. For Hughes Network Systems 9502, consider changing the hardcoded credentials to unique, secure credentials. For Japan Radio JUE-250, consider changing the hardcoded credentials to unique, secure credentials. For Japan Radio JUE-500, consider changing the hardcoded credentials to unique, secure credentials. At the moment, there is no information about a newer version that contains a fix for GateHouse, Inmarsat, and Thuraya IP satellite terminals.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾