Description (CNA)
GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Belden / GarrettCom Magnum 6K and 10K Managed Switches | affected 0 through 4.6.0; affected 0 through 4.7.6; unaffected 4.7.7 |
CWE
CWE-798
References
- https://assets.belden.com/m/114be964b4651983/original/Security-Bulletin-MNS-6K-10K-GarrettCom-BSECV-2017-08.pdf
- https://www.vulncheck.com/advisories/garrettcom-magnum-6k-and-10k-authentication-bypass-via-hardcoded-string
ADP enrichment
No English description supplied.
No references supplied.