Strix
26.1K

CVE-2013-6035

UnknownEPSS 4.58%

Last modified

CVE-2013-6035 is a vulnerability of currently unknown severity. The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations.. EPSS estimates a 4.58% chance of exploitation in the next 30 days.

Description

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations.

Metrics

EPSS Probability
4.58%

90.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
GatehouseGatehouseAll versions
HarrisBganrf-7800b-du204
HarrisBganrf-7800b-vu204
Hughes Network Systems9201All versions
Hughes Network Systems9450All versions
Hughes Network Systems9502All versions
InmarsatInmarsatAll versions
Japan RadioJue-250All versions
Japan RadioJue-500All versions
Thuraya TelecommunicationsIpAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-6035?
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations.
How severe is CVE-2013-6035?
Severity scoring for CVE-2013-6035 is pending analysis. The EPSS model estimates a 4.58% probability of exploitation in the next 30 days.
How do I fix CVE-2013-6035?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2013

View all 2013CVEs →

Are you affected by CVE-2013-6035?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST