CVE-2015-3960

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by leveraging knowledge of a private key from another installation.

• CWE-310

• http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdfVendor Advisory
• http://www.securityfocus.com/bid/75236
• https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01Third Party Advisory, US Government Resource
• http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdfVendor Advisory
• http://www.securityfocus.com/bid/75236
• https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01Third Party Advisory, US Government Resource

Published

Aug 4, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3954Hospira Plum A+ Infusion System version 13.4 and prior, Plum…
• CVE-2015-3955Stack-based buffer overflow in Hospira LifeCare PCA Infusion…
• CVE-2015-3956Hospira Plum A+ Infusion System version 13.4 and prior, Plum…
• CVE-2015-3957Hospira LifeCare PCA Infusion System before 7.0 stores priva…
• CVE-2015-3958Hospira LifeCare PCA Infusion System 5.0 and earlier, and po…
• CVE-2015-3959The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3961The web-server component in MNS before 4.5.6 on Belden Garre…
• CVE-2015-3962Schneider Electric StruxureWare Building Expert MPM before 2…
• CVE-2015-3963Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before …
• CVE-2015-3964SMA Solar Sunny WebBox has hardcoded passwords, which makes …
• CVE-2015-3965Hospira Symbiq Infusion System 3.13 and earlier allows remot…
• CVE-2015-3966The IPsec SA establishment process on Innominate mGuard devi…