CVE-2017-20234 - Vulnerability Analysis

Overview

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass caused by a hardcoded string in the authentication mechanism, letting unauthenticated attackers access administrative functions and sensitive configurations.

Severity & Score

Impact

Unauthenticated attackers can access administrative functions and sensitive configurations, leading to full control over the switch.

Mitigation

Update to the latest version with the authentication bypass fix.

References

• https://assets.belden.com/m/114be964b4651983/original/Security-Bulletin-MNS-6K-10K-GarrettCom-BSECV-2017-08.pdf
• https://www.vulncheck.com/advisories/garrettcom-magnum-6k-and-10k-authentication-bypass-via-hardcoded-string

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner