Vulnerabilities

TI-2019-06959 CVE-2019-9534 · GHSA-367v-cj33-9229

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image

LOW 33

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2019-10-10 No fix listed CWE-494

TI-2019-06958 CVE-2019-9533 · GHSA-p3w4-p4w5-qm9x

MEDIUM 45

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01507 Published 2019-10-10 No fix listed CWE-522

TI-2019-06957 CVE-2019-9532 · GHSA-9qjf-qj4p-rpqr

LOW 33

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2019-10-10 No fix listed CWE-319

TI-2019-06956 CVE-2019-9531 · GHSA-89mq-5pcv-5m9x

MEDIUM 47

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02505 Published 2019-10-10 No fix listed CWE-284

TI-2019-06955 CVE-2019-9530 · GHSA-vfqg-r43j-x694

LOW 25

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00361 Published 2019-10-10 No fix listed CWE-284

TI-2019-06954 CVE-2019-9529 · GHSA-gc98-jrpr-jwqx

LOW 25

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00282 Published 2019-10-10 No fix listed CWE-284