CVE-2012-3014

Related Files

ICS-CERT Advisory - GarrettCom Privilege Escalation

Posted Sep 6, 2012

Authored by ICS-CERT | Site ics-cert.org

ICS-CERT Advisory 12-243-01 - Independent security researcher Justin W. Clarke of Cylance Inc. has identified a privilege-escalation vulnerability in the GarrettCom Magnum MNS-6K Management Software application via the use of a hard-coded password. This vulnerability could allow a remote attacker with any level of access to the system to escalate the attacker’s privilege to the administrative level. The attacker must have access to a logon account on the device to exploit this vulnerability. GarrettCom has produced a patch that mitigates this vulnerability.

tags | advisory, remote

advisories | CVE-2012-3014

SHA-256 | 71f6ced785250177950747b2672a05eeff6721af0e798ee700d0e98c8b4b363b

Download | Favorite | View