CVE-2014-0328: Cobham Ailor 6110 Mini-C Gmdss

High severity, CVSS 9.3. EPSS: 2.8% chance of exploitation in the next 30 days.

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

Affected products

• Cobham Ailor 6110 Mini-C Gmdss: affected versions not specified
• Cobham Sailor 6006 Message Terminal: affected versions not specified
• Cobham Sailor 6222 Vhf: affected versions not specified
• Cobham Sailor 6300 MF / Hf: affected versions not specified

Published 2014-08-15. Last modified 2026-06-17.