Belden GarrettCom MNS 6K/10K Switch Unauthorized Access and Security Key Bypass Vulnerabilities

Belden GarrettCom MNS 6K and 10K Device Access and Security Key Vulnerabilities Summary Vulnerability Overview Title: Belden GarrettCom MNS 6K and 10K Device Access and Security Key Vulnerabilities Publication Date: May 2017 Version: 1.0 Main Issues: Three vulnerabilities were identified in Belden GarrettCom 6K and 10K series managed switches: 1. Allows unauthorized users to access the device. 2. Allows unauthorized users to override their access management level. 3. Allows unauthorized users to bypass security keys during SSL/TLS and HTTP access. Recommendation: Belden recommends customers upgrade to firmware version 4.7.7 to mitigate these vulnerabilities. Affected Scope Affected Products: Model: MNS6000 (Belden Managed Switches) Firmware Versions: Magellan v3.8 and v3.9 Operating System: 4.6.0 and earlier versions Specific Impact: These vulnerabilities may allow unauthorized users to access the device and potentially execute unauthorized code. Remediation For Issues 1, 2, and 3: Upgrade 6K and 10K products to version 4.7.7 or later to resolve these vulnerabilities. Firmware updates for 6K and 10K are available via the GarrettCom support portal. For Issue 4: Refer to the user manual under “Using Secure Keys over SSL” (Chapter 3) to replace default certificates with organization-specific security keys and certificates. Code/POC Extraction The screenshot does not include specific POC code or exploit code blocks; it only contains textual descriptions and table information.

Goal Reached Thanks to every supporter — we hit 100%!

Belden GarrettCom MNS 6K/10K Switch Unauthorized Access and Security Key Bypass Vulnerabilities