CVE-2019-9532CWE-319

CVE-2019-9532: falha em Cobham plc Explorer 710

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Explorer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.
Produtos afetados
Cobham plc · Explorer 710
CVEs relacionadas — Cobham plc Explorer 710

No mesmo produto, das mais perigosas para as menos.

CVE-2019-9531—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commandsEPSS 2.5%CVE-2019-9533—The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08EPSS 1.5%CVE-2019-9530—The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all filesEPSS 0.4%CVE-2019-9529—The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by defaultEPSS 0.3%CVE-2019-9534—The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware imageEPSS 0.2%