What is the CVSS score of CVE-2014-0328?

CVE-2014-0328 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.4%.

Ailor 6110 Mini C Gmdss CVE-2014-0328

CRITICAL

2014-08-15 cret@cert.org

RCE Ailor 6110 Mini C Gmdss Sailor 6006 Message Terminal Sailor 6222 Vhf Sailor 6300 Mf Hf

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 15, 2014 - 11:15 cve.org

CRITICAL 9.3

DescriptionCVE.org

AnalysisAI

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response. Affected products include: Cobham Ailor 6110 Mini-C Gmdss, Cobham Sailor 6006 Message Terminal, Cobham Sailor 6222 Vhf, Cobham Sailor 6300 Mf \/ Hf.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.