Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities.
Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:
CWE-327: Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 (Please note that the CVE for this vulnerability has been changed from CVE-2014-2943 to CVE-2014-2942 due to a duplicate CVE identifier.)
A local unauthenticated attacker may be able to gain full control of the satellite terminal.
The CERT/CC is currently unaware of a practical solution to this problem.
Thanks to Ruben Santamarta for reporting this vulnerability.
This document was written by Chris King.