Back to Database
Status published
Critical
CVE-2014-0328
The thraneLINK protocol implementation on Cobham devices does not verify...
Vulnerability Description
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-0328
Credits & Attribution
No credits recorded in the NVD database.
References
More from cobham
View All →CVE-2019-16320
Cobham Sea Tel v170 224521 through v194 225444 devices allow...
Medium
5.3
CVE-2018-5728
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Medium
5.3
CVE-2018-5267
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Critical
9.8
CVE-2018-5266
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
High
7.5
CVE-2018-5071
Persistent XSS exists in the web server on Cobham Sea...
Medium
5.4
Affected Vendor
cobham
View all reports →Affected Software
ailor 6110 mini-c gmdss, sailor 6006 message terminal, sailor 6222 vhf, sailor 6300 mf \/ hf
Vulnerable Versions:
Unknown
Timeline
Official Publish:
August 15th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.