Authentication Bypass Vulnerability in GarrettCom Magnum Managed Switches

CVE-2017-20234

What is CVE-2017-20234?

GarrettCom Magnum 6K and 10K managed switches are susceptible to an authentication bypass vulnerability that permits unauthorized individuals to gain access to sensitive administrative functions. This vulnerability arises from a hardcoded string within the authentication process, enabling attackers to circumvent login controls without valid credentials. A compromised device may allow attackers to alter configurations, posing significant security risks to network integrity.

References