CVE-2017-20234CWE-798

GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

Critical · published April 3, 2026

CVSS v4.0
9.3
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00455 · 38.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-04-03T22:49Z
EPSS history
Timeline
  • 03 APR 22:49Z
    GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String
    cvelistv5