Magnum MNS-6K Hardcoded Admin Account

High Nessus Plugin ID 62439


The remote device has a hardcoded admin account.


According to its self-reported version, the remote GarrettCom device has a hardcoded admin account that can be accessed by an authenticated user to gain admin privileges on the device.


Upgrade to MNS-6K version 4.4.0 / 14.4.0 or later.

See Also

Plugin Details

Severity: High

ID: 62439

File Name: scada_garrettcom_hardcoded_password.nbin

Version: $Revision: 1.21 $

Type: remote

Family: SCADA

Published: 2012/10/05

Modified: 2018/01/29

Dependencies: 55900, 10281, 11153, 17975

Risk Information

Risk Factor: High


Base Score: 7.7

Temporal Score: 5.7

Vector: CVSS2#AV:A/AC:L/Au:S/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:garrettcom:magnum_managed_networks_software-6k

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2012/05/18

Vulnerability Publication Date: 2012/08/30

Reference Information

CVE: CVE-2012-3014

BID: 55334

OSVDB: 85007

ICSA: 12-243-01