Garrettcom

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Garrettcom records in CISA KEV

No Garrettcom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magnum 10k Firmware 4 records LOW Magnum 6k Firmware 4 records LOW Magnum Managed Networks Software-6k 1 record LOW Magnum Managed Networks Software-6k Secure 1 record LOW

Records

4 records in Magnum 10k Firmware · all components

TI-2015-03345 CVE-2015-3959 · GHSA-pmvq-rf92-rfx7

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches…

LOW 32

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00377 Published 2015-08-04 No fix listed

TI-2015-03330 CVE-2015-3942 · GHSA-x2vh-xpq4-8m84

Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allow remote attackers to inject arbitrary web script or HTML via…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01487 Published 2015-08-04 No fix listed CWE-79

TI-2015-03346 CVE-2015-3960 · GHSA-4c9f-wvvv-9w26

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches…

LOW 22

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attacke…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00883 Published 2015-08-04 No fix listed CWE-310

TI-2015-03347 CVE-2015-3961 · GHSA-9qhx-vf4m-pg5c

The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum…

LOW 19

The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service (memory corruption and reboot) via a crafted URL.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0126 Published 2015-08-04 No fix listed CWE-399

Open these records in search →

Critical	0
High	2
Medium	2
Low	1
No CVSS	0