CVE-2015-3959

no score yetEPSS 0.4%

garrettcom: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
Published: 2015-08-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

garrettcom:magnum_10k_firmware
garrettcom:magnum_6k_firmware

References

http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf
http://www.securityfocus.com/bid/75235
https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01
http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf
http://www.securityfocus.com/bid/75235

Check your stack JSON