VDB
GCVE-110-CERTCC-2013-250358
GCVE-110-CERTCC-2013-250358
Advisory PublishedCVSS 5.7/10
Firmware developed by Hughes Network Systems used in a number of BGAN satellite terminals contains undocumented hardcoded login credentials (CWE-798). Additionally, the firmware contains an insecure proprietary communications protocol, likely a debugging service, that allows unauthenticated local network users to perform privileged operations on the device (CWE-306).
Risk Scores
CVSS 2.0
5.7/10
Medium · AV:A/AC:M/Au:N/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4.8remediation_levelUreport_confidenceCenvironmental_score1.209942309408target_distributionLenvironmental_vectorCDP:N/TD:L/CR:ND/IR:ND/AR:ND
Aliases
References
Browse GCVE Records
73,443 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.