CVE-2015-3960: The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA...

Security readout for executives and security teams

Some Belden GarrettCom industrial Ethernet switches shipped firmware that reused the same HTTPS private keys and certificates across customer installations. If an attacker knows that shared private key from another device, they may be able to weaken or bypass the protection normally provided by HTTPS management sessions. Exposure is most likely in industrial or operational technology networks still running Magnum 6K or Magnum 10K switches with MNS firmware older than 4.5.6, especially where HTTPS management is reachable beyond a tightly controlled management network. Prioritize remediation where these switches support critical operations or are reachable from corporate, vendor, or remote access networks. The vulnerability can weaken trust in secure management channels, but the provided sources do not show active exploitation. Mitigation focus: Inventory Magnum 6K and Magnum 10K switches and record MNS firmware versions.; Upgrade affected devices to MNS 4.5.6 or vendor-supported later firmware.; Restrict switch management interfaces to trusted administrative networks only..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.