{"id":"CVE-2014-2964","aliases":["EUVD-2014-2986","GHSA-xm5x-mwvv-f4pq"],"status":"published","title":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2)...","description":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00486,"percentile":0.42128,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2014-08-15T10:00:00Z","modified":"2026-06-17T00:07:24Z","products":[{"vendor":"cobham","product":"aviator_700d"},{"vendor":"cobham","product":"aviator_700e"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/882207","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2964"},{"url":"https://github.com/advisories/GHSA-xm5x-mwvv-f4pq"}],"sources":{"cve":[{"id":"CVE-2014-2964","description":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.","status":"published","published":"2014-08-15T10:00:00Z","modified":"2024-08-06T10:28:46.049Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2014-2986","description":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.","status":"published","published":"2014-08-15T10:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.660671Z"}],"ghsa":[{"id":"GHSA-xm5x-mwvv-f4pq","title":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2)...","description":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.","status":"published","published":"2022-05-17T04:38:24Z","modified":"2023-01-28T05:02:14Z","updated_at":"2026-11-02T14:43:44.460546Z"}],"nvd":[{"id":"CVE-2014-2964","description":"Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.","status":"published","published":"2014-08-15T11:15:43.09Z","modified":"2026-06-17T00:07:24.63Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}