GarrettCom Magnum MNS-6K software hardcoded Password Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
GarrettCom Magnum MNS-6K
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55334
Cve id: CVE-2012-3014

GarrettCom Magnum MNS-6K is the management software used by the grett switch.

GarrettCom Magnum MNS-6K 4.1.14 and earlier versions, MNS-6K-SECURE 4.1.14 and earlier versions have hard-coded passwords that allow attackers to exploit this vulnerability to access devices using the affected software as administrators.

<* Source: Justin W. Clarke
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

GarrettCom
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Www.garrettcom.com/