CVE-2015-3959

State: Published
Severity: Not scored
Published: Aug 4, 2015
Updated: Aug 6, 2024
Reserved: May 12, 2015

Description

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

75235vdb-entry
http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.