CVE-2014-2940

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-15 · updated 2026-06-17

Description

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.

Affected products

Cobham Sailor 6000 Series Firmware: 1.08_mfhf, 2.11_vhf
Cobham Sailor 900 Firmware: 1.08_mfhf, 2.11_vhf

References

http://www.kb.cert.org/vuls/id/460687
http://www.kb.cert.org/vuls/id/460687

Get alerted when CVE-2014-2940 or the next vulnerability affects your stack