PT-2019-19686 · Cobham · Cobham Explorer 710

David Belasco + 1 · Published 2019-10-10 · Updated 2019-10-21 · CVE-2019-9529

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07

Description The web application portal of the device has no authentication by default, allowing an unauthenticated, local attacker connected to the device to access the portal and make any changes to the device.

Recommendations For firmware version 1.07, enable authentication on the web application portal to prevent unauthorized access and changes to the device.

Fix

Missing Authentication

Improper Access Control

Weakness Enumeration

CWE-306

CWE-284

Related Identifiers

CVE-2019-9529

Affected Products

Cobham Explorer 710

References · 3

• https://osv.dev/vulnerability/CVE-2019-9529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9529 · Security Note
• https://kb.cert.org/vuls/id/719689 · Note