CVE-2014-5380: Granding grand ma300 firmware cleartext transmission vulnerability

Granding · Grand Ma300 Firmware

Grand MA 300 allows retrieval of the access PIN from sniffed data.

7.5 CVSS 3.1 High EPSS 4.3% · top 9.1% CWE-319 · Cleartext transmission

7.5CVSS 3.1 base score, v2 5.0

4.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 4 tagged exploit

17 Jun 2026Last modified by NVD

Description

Grand MA 300 allows retrieval of the access PIN from sniffed data.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Grand Ma300 Firmware Granding

References

Link	Tags
http://packetstormsecurity.com/files/128003/Grand-MA-300-Fingerprint-Reader-Weak-PIN-Verification.html	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2014/Aug/70	ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/69390	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95484	Third Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/128003/Grand-MA-300-Fingerprint-Reader-Weak-PIN-Verification.html	ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2014/Aug/70	ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/69390	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95484	Third Party AdvisoryVDB Entry

Track CVE-2014-5380 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2014-5381Granding grand ma300 firmware insufficiently protected credentials vulnerabilityGrand MA 300 allows a brute-force attack on the PIN.EPSS 7.1%13 Jan 2020

Source: NIST National Vulnerability Database (record CVE-2014-5380), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.