VDB

GCVE-110-CERTCC-2013-250358

GCVE-110-CERTCC-2013-250358
Advisory PublishedCVSS 5.7/10
Vulnetix · Advisory published January 31, 2014
Firmware developed by Hughes Network Systems used in a number of BGAN satellite terminals contains undocumented hardcoded login credentials (CWE-798). Additionally, the firmware contains an insecure proprietary communications protocol, likely a debugging service, that allows unauthenticated local network users to perform privileged operations on the device (CWE-306).

Risk Scores

CVSS 2.0
5.7/10
Medium · AV:A/AC:M/Au:N/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4.8remediation_levelUreport_confidenceCenvironmental_score1.209942309408target_distributionLenvironmental_vectorCDP:N/TD:L/CR:ND/IR:ND/AR:ND

References

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›