PT-2019-19689 · Cobham · Cobham Explorer 710

David Belasco + 1 · Published 2019-10-10 · Updated 2019-10-17 · CVE-2019-9532

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07

Description The web application portal of the Cobham EXPLORER 710 sends the login password in cleartext, potentially allowing an unauthenticated, local attacker to intercept the password and gain access to the portal.

Recommendations For firmware version 1.07, consider restricting access to the web application portal until a fix is available, and avoid using the portal over unsecured networks to minimize the risk of password interception.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2019-9532

Affected Products

Cobham Explorer 710

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9532 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9532 · Vendor Advisory
• https://kb.cert.org/vuls/id/719689 · Note