What’s Vulnerable › Vulnerabilities

CVE-2014-0328

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-15 · updated 2026-06-17

Description

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

Affected products

• Cobham Ailor 6110 Mini-C Gmdss: all versions
• Cobham Sailor 6006 Message Terminal: all versions
• Cobham Sailor 6222 Vhf: all versions
• Cobham Sailor 6300 Mf / Hf: all versions

References

• http://www.kb.cert.org/vuls/id/179732
• http://www.kb.cert.org/vuls/id/179732

Get alerted when CVE-2014-0328 or the next vulnerability affects your stack