CVE-2014-0327

{"id": "CVE-2014-0327", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-08-17T23:55:04.087", "references": [{"url": "http://www.kb.cert.org/vuls/id/578598", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/578598", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321."}, {"lang": "es", "value": "Terminal Upgrade Tool en las implementaciones Pilot Below Deck Equipment (BDE) y OpenPort en los terminales de sat\u00e9lite Iridium permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante la subida de firmware nuevo al puerto TCP 54321."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:iridium:open_port:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8DA90AD-B539-4F4B-BB59-C41CA13C20ED"}, {"criteria": "cpe:2.3:h:iridium:pilot_below_deck_equipment:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9A01DE3-186A-45A6-AF49-E3A51374DB99"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/306.html\">CWE-306: Missing Authentication for Critical Function</a>", "sourceIdentifier": "cret@cert.org"}