Cobham
10 CVEs across 53 Cobham products. Browse Cobham vulnerabilities, severities, and proof-of-concept exploits.
Cobham products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44856 | Medium | 6.1 | 2024-04-12 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rst… |
CVE-2023-44855 | Medium | 6.5 | 2024-04-12 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdia… |
CVE-2023-44857 | High | 8.1 | 2024-04-12 | An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_21D24 function in the acu_web c… |
CVE-2023-44854 | Medium | 6.1 | 2024-04-12 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_s… |
CVE-2023-44853 | Medium | 4.8 | 2024-04-12 | \An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_219C4 function… |
CVE-2023-44852 | High | 8.2 | 2024-04-12 | Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_s… |
CVE-2019-9534 | High | 7.8 | 2019-10-10 | The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom f… |
CVE-2019-9533 | Critical | 9.8 | 2019-10-10 | The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engine… |
CVE-2019-9532 | High | 7.8 | 2019-10-10 | The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local… |
CVE-2019-9531 | Critical | 9.8 | 2019-10-10 | The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated… |
CVE-2019-9530 | Medium | 5.5 | 2019-10-10 | The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an… |
CVE-2019-9529 | Medium | 5.5 | 2019-10-10 | The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local atta… |
CVE-2019-16320 | Medium | 5.3 | 2019-09-15 | Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude… |
CVE-2018-19394 | Medium | 4.8 | 2019-03-15 | Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquir… |
CVE-2018-19393 | High | 7.5 | 2019-03-15 | Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was e… |
CVE-2018-19392 | Critical | 9.8 | 2019-03-15 | Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user accou… |
CVE-2018-19391 | Medium | 6.1 | 2019-03-15 | Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?p… |
CVE-2018-5728 | Medium | 5.3 | 2018-01-16 | Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated… |
CVE-2018-5267 | Critical | 9.8 | 2018-01-08 | Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx… |
CVE-2018-5266 | High | 7.5 | 2018-01-08 | Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines… |
CVE-2018-5071 | Medium | 5.4 | 2018-01-08 | Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaSc… |
CVE-2014-2942 | | 2014-09-22 | Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal s… | |
CVE-2014-2964 | | 2014-08-15 | Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physicall… | |
CVE-2014-2941 | | 2014-08-15 | Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor… | |
CVE-2014-2940 | | 2014-08-15 | Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows atta… | |
CVE-2014-0328 | | 2014-08-15 | The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging ph… | |
CVE-2013-7180 | | 2014-08-15 | Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password r… |