Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-3960: Belden Magnum 6K/10K switch firmware exposes HTTPS keys

CVE-2015-3960 · published 11 years ago

Summary

The switch firmware released before version 4.5.6 contains the same secret encryption keys on every device. Because the keys are identical, an attacker who learns the key from one installation could break the secure web connection on another customer's switch. Updating the switches to firmware version 4.5.6 or later removes the shared keys and restores proper protection.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
garrettcom	magnum_10k_firmware	<= 4.5.5 `cpe:2.3:o:garrettcom:magnum_10k_firmware::::::::`
garrettcom	magnum_6k_firmware	<= 4.5.5 `cpe:2.3:o:garrettcom:magnum_6k_firmware::::::::`

Original advisory text

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by leveraging knowledge of a private key from another installation.

References

http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf Vendor Advisory
http://www.securityfocus.com/bid/75236
https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01 Third Party Advisory US Government Resource

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-310Cryptographic Issues

Timeline

Published4 Aug 2015

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2015-3960 · NVD

Track software like this

Free during beta