PatchTheCVEmagnum 10k firmware vulnerabilities and fixes
Recent CVEs affecting magnum 10k firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: magnum10kfirmware.
magnum 10k firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2015-08-04. Highest priority: CVE-2015-3942 (score 34/100).
- CVE-2015-3961 LOW 3.5 UPGRADE UPGRADE The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows rem
- CVE-2015-3960 MEDIUM 4.3 UPGRADE UPGRADE The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA pri
- CVE-2015-3959 HIGH 7.2 UPGRADE UPGRADE The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial
- CVE-2015-3942 MEDIUM 4.3 UPGRADE UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden
FAQ
How do I fix magnum 10k firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is magnum 10k firmware being exploited right now?
None of the tracked magnum 10k firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which magnum 10k firmware CVE should I patch first?
CVE-2015-3942 currently ranks highest (34/100): Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden .