What is the CVSS score of CVE-2014-2941?

CVE-2014-2941 has a CVSS 2.0 base score of 7.1 (High). CVSS vector: AV:N/AC:M/Au:N/C:N/I:C/A:N. EPSS exploitation probability: 0.9%.

Ailor 6110 Mini C Gmdss CVE-2014-2941

HIGH

2014-08-15 cret@cert.org

Information Disclosure Ailor 6110 Mini C Gmdss Sailor 6006 Message Terminal Sailor 6222 Vhf Sailor 6300 Mf Hf

7.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:M/Au:N/C:N/I:C/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:C/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Aug 15, 2014 - 11:15 cve.org

HIGH 7.1

DescriptionCVE.org

AnalysisAI

Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user's credentials. Affected products include: Cobham Ailor 6110 Mini-C Gmdss, Cobham Sailor 6006 Message Terminal, Cobham Sailor 6222 Vhf, Cobham Sailor 6300 Mf \/ Hf.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.