« Volver al listado

CVE-2014-0327

Estado: ModificadaAlta (9.3)—

The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Iridium — Open PortIridium — Pilot Below Deck Equipment

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0327",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-08-17T23:55:04.087",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/578598",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/578598",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321."
    },
    {
      "lang": "es",
      "value": "Terminal Upgrade Tool en las implementaciones Pilot Below Deck Equipment (BDE) y OpenPort en los terminales de satélite Iridium permite a atacantes remotos ejecutar código arbitrario mediante la subida de firmware nuevo al puerto TCP 54321."
    }
  ],
  "lastModified": "2026-06-17T00:02:48.010",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:iridium:open_port:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8DA90AD-B539-4F4B-BB59-C41CA13C20ED"
            },
            {
              "criteria": "cpe:2.3:h:iridium:pilot_below_deck_equipment:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9A01DE3-186A-45A6-AF49-E3A51374DB99"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/306.html\">CWE-306: Missing Authentication for Critical Function</a>",
  "sourceIdentifier": "cret@cert.org"
}