CVE-2017-20234
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability. Unauthenticated attackers can gain unauthorized access by exploiting a hardcoded string in the authentication mechanism.
Risk Assessment
Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials, potentially leading to full device compromise.
Recommendation
Immediately update the firmware of GarrettCom Magnum 6K and 10K switches to the latest version provided by the vendor. If no update is available, restrict management interface access to trusted networks only.
Original NVD description (English source)
GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.