VDB

GCVE-110-CERTCC-2014-578598

GCVE-110-CERTCC-2014-578598
Advisory PublishedCVSS 9.3/10
Vulnetix · Advisory published August 7, 2014
Broadband satellite terminals using Iridium Pilot and OpenPort have been found to contain undocumented hardcoded login credentials (CWE-798). Additionally, these broadband satellite terminals utilize an insecure proprietary communications protocol that allows unauthenticated users to perform privileged operations on the devices (CWE-306).
Download JSON Open in Console

Risk Scores

CVSS 2.0
9.3/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score8.8remediation_levelUreport_confidenceCenvironmental_score9.2058940608target_distributionHenvironmental_vectorCDP:LM/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-0326CVE-2014-0327

Transitive aliases

VAR-201408-0145GSD-2014-0326GHSA-v824-6qgw-5mhrGSD-2014-0327GHSA-7pp5-xx5q-8pxvVAR-201408-0146

References

Iridium Pilot and OpenPort contain multiple vulnerabilities
url
Iridium Pilot and OpenPort contain multiple vulnerabilities
url
Iridium Pilot and OpenPort contain multiple vulnerabilities
advisory

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›