GCVE-110-CERTCC-2014-820196

Advisory PublishedCVSS 8.3/10

Vulnetix · Advisory published January 4, 2015

Furuno Voyage Data Recorder (VDR) VR-3000/VR-3000S and VR-7000 moduleserv firmware update utility fails to properly sanitize user-provided input and is vulnerable to arbitrary command execution with root privileges.

Download JSON Open in Console

Risk Scores

CVSS 2.0

8.3/10

High · AV:A/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.2remediation_levelOFreport_confidenceURenvironmental_score1.83432281134921target_distributionLenvironmental_vectorCDP:LM/TD:L/CR:ND/IR:ND/AR:ND

References

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

advisory

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

url

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

url

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON