CVE-2013-6035

Published: Feb 4, 2014Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations.

Affected (10)

Products: Gatehouse: Gatehouse · Harris: Bgan · Hughes Network Systems: 9201, 9450, 9502 · +3 more

Show all products

Gatehouse: Gatehouse · Harris: Bgan · Hughes Network Systems: 9201, 9450, 9502 · Inmarsat: Inmarsat · Japan Radio: Jue 250, Jue 500 · Thuraya Telecommunications: Ip

1 product

1 product

Hughes Network Systems

3 products

1 product

2 products

Thuraya Telecommunications

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Gatehouse Gatehouse	All versions
Harris Bgan	Version rf-7800b-du204
Harris Bgan	Version rf-7800b-vu204
Hughes Network Systems 9201	All versions
Hughes Network Systems 9450	All versions
Hughes Network Systems 9502	All versions
Inmarsat Inmarsat	All versions
Japan Radio Jue 250	All versions
Japan Radio Jue 500	All versions
Thuraya Telecommunications Ip	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

http://www.kb.cert.org/vuls/id/250358

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/250358

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.