CVE-2019-9529CWE-284

CVE-2019-9529: falha em Cobham plc Explorer 710

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Explorer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.
Produtos afetados
Cobham plc · Explorer 710
CVEs relacionadas — Cobham plc Explorer 710

No mesmo produto, das mais perigosas para as menos.

CVE-2019-9531—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commandsEPSS 2.5%CVE-2019-9533—The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08EPSS 1.5%CVE-2019-9530—The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all filesEPSS 0.4%CVE-2019-9534—The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware imageEPSS 0.2%CVE-2019-9532—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartextEPSS 0.2%