PT-2019-19689 · Cobham · Cobham Explorer 710

David Belasco + 1 · Publicado 2019-10-10 · Atualizado 2019-10-17 · CVE-2019-9532

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07

Description The web application portal of the Cobham EXPLORER 710 sends the login password in cleartext, potentially allowing an unauthenticated, local attacker to intercept the password and gain access to the portal.

Recommendations For firmware version 1.07, consider restricting access to the web application portal until a fix is available, and avoid using the portal over unsecured networks to minimize the risk of password interception.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2019-9532

Produtos afetados

Cobham Explorer 710

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9532 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9532 · Aviso do Fabricante
• https://kb.cert.org/vuls/id/719689 · Nota