Unrated severityNVD Advisory· Published Aug 4, 2015· Updated May 6, 2026
CVE-2015-3960
CVE-2015-3960
Description
The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by leveraging knowledge of a private key from another installation.
Affected products
2- cpe:2.3:o:garrettcom:magnum_10k_firmware:*:*:*:*:*:*:*:*Range: <=4.5.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdfnvdVendor Advisory
- ics-cert.us-cert.gov/advisories/ICSA-15-167-01nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/75236nvd
News mentions
0No linked articles in our index yet.