Priority LOW 39
An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_21D24 function in the acu_web component.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00912 · Published 2024-04-12 · No fix listed CWE-94
Priority LOW 28
Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rstat, sender, and recipients' parameters of the sub_21D24 funct…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00538 · Published 2024-04-12 · No fix listed CWE-79
Priority MEDIUM 62
Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdiag, sender, and recipients parameters of the sub_219C4 functio…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00508 · Published 2024-04-12 · No fix listed CWE-79
Priority LOW 28
Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_rslog_decode function in the acu_web file.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00538 · Published 2024-04-12 · No fix listed CWE-79
Priority MEDIUM 57
\An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_219C4 function in the acu_web file.
CVSS 3.1MEDIUM 4.8· Local · Low privileges · User interaction · EPSS 0.00304 · Published 2024-04-12 · No fix listed CWE-94
Priority LOW 37
Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_traps_decode function in the acu_web file.
CVSS 3.1HIGH 8.2· Network · Low privileges · User interaction · EPSS 0.00619 · Published 2024-04-12 · No fix listed CWE-79
Priority LOW 26
Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01093 · Published 2019-09-15 · No fix listed CWE-200