Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-20234 EUVD-2017-18957

GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

Published Apr 3, 2026 · Updated Oct 1, 2026 · Assigned by VulnCheck

Description

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.

Affected products

VendorProductAffectedFixed
Belden GarrettCom Magnum 6K and 10K Managed Switches ≤ 4.6.0, ≤ 4.7.6 4.7.7

References