Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2017-20234

GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

Description

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Belden GarrettCom Magnum 6K and 10K Managed Switches

Default version status: affected

  • 0 to ≤ 4.6.0affected
  • 0 to ≤ 4.7.6affected
  • 4.7.7unaffected

References