ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2017-20234

GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

CVSS 3.1 9.8 CRITICALCVSS 4.0 9.3 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2017-20234

Published

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2017-20234

Published

GarrettCom Magnum 6K and 10K Managed Switches

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Belden",
                    "product": "GarrettCom Magnum 6K and 10K Managed Switches",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "versionType": "semver",
                            "lessThanOrEqual": "4.6.0"
                        },
                        {
                            "status": "affected",
                            "version": "0",
                            "versionType": "semver",
                            "lessThanOrEqual": "4.7.6"
                        },
                        {
                            "status": "unaffected",
                            "version": "4.7.7",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "affected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON