Improper access control in Cobham plc Explorer 710
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454.
No Cobham plc vulnerabilities are listed in CISA KEV.
6 records in Explorer 710 Firmware · all components
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454.
The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08.
The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext.
The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default.