GCVE - cpe:2.3:o:garrettcom:magnum_10k_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:garrettcom:magnum_10k_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Garrettcom (`1aa8772e-4ea4-500e-8873-a05da892c6d2`)
Product	Magnum 10K Firmware (`b52a7d89-d672-554e-a1d9-1c5a924330f3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-3961`	vulnerable	2026-06-08 05:06:38.884833	Details available The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service (memory corruption and reboot) via a crafted URL. Published: 2015-08-04T01:00:00.000Z Updated: 2024-08-06T06:04:01.175Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/75228 http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3960`	vulnerable	2026-06-08 05:06:38.884532	Details available The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by leveraging knowledge of a private key from another installation. Published: 2015-08-04T01:00:00.000Z Updated: 2024-08-06T06:04:01.020Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/75236 http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3959`	vulnerable	2026-06-08 05:06:38.884207	Details available The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password. Published: 2015-08-04T01:00:00.000Z Updated: 2024-08-06T06:04:01.149Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/75235 http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3942`	vulnerable	2026-06-08 05:06:38.867138	Details available Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2015-08-04T01:00:00.000Z Updated: 2024-08-06T06:04:00.988Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/75227 http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.