PT-2014-3281 · Cobham · Cobham Sailor 900 Vsat+3

Ruben Santamarta · Publicado 2014-08-15 · Atualizado 2014-08-15 · CVE-2013-7180

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cobham SAILOR 900 VSAT SAILOR FleetBroadBand versions 150, 250, and 500 EXPLORER BGAN AVIATOR versions 200, 300, 350, and 700D

Description The issue allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code, due to improper restriction of password recovery.

Recommendations For Cobham SAILOR 900 VSAT, restrict physical and terminal access to prevent spoofing of the reset code. For SAILOR FleetBroadband versions 150, 250, and 500, limit access to the device to minimize the risk of exploitation. For EXPLORER BGAN, consider implementing additional security measures to prevent unauthorized access. For AVIATOR versions 200, 300, 350, and 700D, restrict access to the device and its components to prevent administrative privilege escalation.

Correção

Identificadores relacionados

CVE-2013-7180

Produtos afetados

Aviator

Cobham Sailor 900 Vsat

Explorer Bgan

Sailor Fleetbroadband

Referências · 2

• http://kb.cert.org/vuls/id/602006 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7180 · Nota de Segurança