PT-2019-19687 · Cobham · Cobham Explorer 710

David Belasco + 1 · Publicado 2019-10-10 · Atualizado 2021-10-26 · CVE-2019-9530

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07

Description The issue concerns the lack of access restrictions on the web root directory, allowing an unauthenticated, local attacker connected to the device to access and download any file found in this directory.

Recommendations For firmware version 1.07, restrict access to the web root directory to prevent unauthorized file downloads.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2019-9530

Produtos afetados

Cobham Explorer 710

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9530 · Nota de Segurança
• https://kb.cert.org/vuls/id/719689 · Nota
• https://osv.dev/vulnerability/CVE-2019-9530 · Aviso do Fabricante