CVE-2017-20234: GarrettCom Magnum 6K/10K Authentication Bypass via Hardcoded String
CVE-2017-20234 affects Belden GarrettCom Magnum 6K and 10K managed switches. A hardcoded string in the authentication mechanism allows unauthenticated attackers to bypass login controls and reach administrative functions and sensitive configuration. The record lists a CVSS 3.1 score of 9.8 (Critical), no KEV listing, and no fixed version.
Overview
GarrettCom Magnum 6K and 10K managed switches, listed in the record under the Belden product name, contain an authentication bypass tied to a hardcoded string in the authentication mechanism (CWE-798). The record states that an unauthenticated attacker can gain unauthorized access without valid credentials.
Impact
- Unauthorized access to administrative functions of the switch.
- Exposure of sensitive switch configuration.
- The record gives a CVSS 3.1 base score of 9.8 (Critical) and a CVSS 4.0 score of 9.3 from VulnCheck.
The vulnerability does not require user interaction, according to the CVSS vector in the record, so exposure of the management plane is the main factor that determines risk.
Affected products and versions
The record lists the Belden GarrettCom Magnum 6K and 10K Managed Switches with versions up to and including 4.6.0 and up to and including 4.7.6. No fixed version is listed in the record. The vendor bulletin referenced in the record should be checked for remediation details.
Exploitation status
This CVE is not listed in the CISA KEV catalog in the record. The sources consulted do not show confirmed exploitation in the wild. The SSVC fields in the record report exploitation as none while marking the issue as automatable.
Remediation and mitigation
- Check the Belden security bulletin for vendor guidance and any firmware update applicable to your model.
- Restrict access to the switch management interface to dedicated administrative networks, and block it from untrusted segments.
- Place affected switches behind segmentation or jump-host controls until a verified update is applied.
- Plan replacement or retirement for devices that cannot be updated, since the record provides no fixed version.
Detection guidance
- Review management logs for logins from unexpected source addresses or at unusual times.
- Look for unplanned configuration changes, new accounts, or changes to access settings.
- Compare current configurations against approved baselines and investigate deviations.
Limitations of the available information
The record contains no fixed version, no patch identifier, and no confirmed exploitation data. The contents of the vendor bulletin and the VulnCheck advisory were not reviewed for this analysis beyond their listing in the record. The exact nature of the hardcoded string is not described in the record and is not reproduced here.
Frequently asked questions
What is the core problem in CVE-2017-20234?
The record describes an authentication bypass caused by a hardcoded string in the authentication mechanism of GarrettCom Magnum 6K and 10K switches, classified as CWE-798.
Is this CVE known to be actively exploited?
No. The CVE is not listed in the CISA KEV catalog in the record, and the sources consulted do not show confirmed exploitation in the wild.
Is there a fixed version?
The record lists no fixed version. Check the vendor bulletin referenced in the record for remediation guidance.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.