CVE-2019-9531CWE-284

CVE-2019-9531: vulnerability in Cobham plc Explorer 710

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commands

Published · Updated

Follow this CVE+ Monitor Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.5%
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT) commands, including some that provide unauthenticated, shell-like access to the device.
Affected products
Cobham plc · Explorer 710
Related CVEs — Cobham plc Explorer 710

In the same product, most dangerous first.

CVE-2019-9533—The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08EPSS 1.5%CVE-2019-9530—The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all filesEPSS 0.4%CVE-2019-9529—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by defaultEPSS 0.3%CVE-2019-9534—The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware imageEPSS 0.2%CVE-2019-9532—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartextEPSS 0.2%