cbcvebase.
CVE-2014-5381
published 2020-01-13

CVE-2014-5381: Grand MA 300 allows a brute-force attack on the PIN.

PriorityP259critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
7.06%
93.4th percentile
Grand MA 300 allows a brute-force attack on the PIN.

Affected

1 ranges
VendorProductVersion rangeFixed in
grandinggrand_ma300_firmware——

Detection & IOCsextracted from sources · hover to see the quote

port4370/udp↗
commandmakepacket(1000, 0, 0, "")↗
commandmakepacket(1001, $cid, 2, "")↗
  • →Alert on UDP packet type 2005 response from a Grand MA 300 device on port 4370 — this response indicates the device is requiring a password and is therefore susceptible to brute-force. ↗
  • →Network sniffing of traffic to/from Grand MA 300 on UDP 4370 can also disclose the PIN directly; monitor for unauthorized passive capture sessions targeting this port. ↗
  • ·The vulnerable firmware version is 6.60; confirm device firmware before applying detections to avoid false positives on patched devices. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.