« Volver al listado

CVE-2013-6034

Estado: ModificadaAlta (10)—

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login access via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Gatehouse — GatehouseHarris — BganHughes Network Systems — 9201Hughes Network Systems — 9450Hughes Network Systems — 9502Inmarsat — InmarsatJapan Radio — Jue-250Japan Radio — Jue-500Thuraya Telecommunications — IP

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6034",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-02-04T05:39:08.277",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/250358",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/250358",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login access via unknown vectors."
    },
    {
      "lang": "es",
      "value": "El firmware de los terminales de conexión vía satélite GateHouse; Harris BGAN RF-7800B-VU204 y BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450 y 9502; Inmarsat; Japan Radio JUE-250 y JUE-500 y Thuraya IP tienen las credenciales definidas en el código (hardcoded), lo que hace más fácil a atacantes obtener acceso no especificado a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:59:55.610",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:gatehouse:gatehouse:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D247408D-0B41-413B-B81B-9B046E5827D1"
            },
            {
              "criteria": "cpe:2.3:h:harris:bgan:rf-7800b-du204:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AEA9731-4226-4A67-BE6A-044636C5228F"
            },
            {
              "criteria": "cpe:2.3:h:harris:bgan:rf-7800b-vu204:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0AA62AC-7B5F-435A-976D-C5EF35DC1BA1"
            },
            {
              "criteria": "cpe:2.3:h:hughes_network_systems:9201:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44657548-B2D5-4EDF-AF40-53E200B6761F"
            },
            {
              "criteria": "cpe:2.3:h:hughes_network_systems:9450:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25BD61A1-B423-4922-BAEB-8D1875F1C21C"
            },
            {
              "criteria": "cpe:2.3:h:hughes_network_systems:9502:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C09DE1B7-24F1-47E1-86FB-AF5F8623F364"
            },
            {
              "criteria": "cpe:2.3:h:inmarsat:inmarsat:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE3B6B90-17AC-407A-9413-31E07A255A93"
            },
            {
              "criteria": "cpe:2.3:h:japan_radio:jue-250:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB4AADA3-5FFB-4273-B68A-8E0E6C6741C0"
            },
            {
              "criteria": "cpe:2.3:h:japan_radio:jue-500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5403F151-91BE-4D50-A973-E674F277A650"
            },
            {
              "criteria": "cpe:2.3:h:thuraya_telecommunications:ip:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9074FA7-692D-46A0-81CE-1609370BDB68"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}