CVE-2013-7180

2014-08-1511:15:42

[email protected]

web.nvd.nist.gov

cobham

sailor 900 vsat

fleetbroadband

explorer bgan

aviator

password recovery

administrative privileges

vulnerability

exploit

nvd

cve-2013-7180

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.6%

JSON

Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code.

Affected configurations

NVD

Node

cobhamaviator_200Match-

cobhamaviator_300Match-

cobhamaviator_350Match-

cobhamaviator_700dMatch-

cobhamexplorer_bganMatch-

cobhamsailor_900_vsatMatch-

cobhamsailor_fleetbroadband_150Match-

cobhamsailor_fleetbroadband_250Match-

cobhamsailor_fleetbroadband_500Match-

CPENameOperatorVersion
cobham:aviator_200cobham aviator 200eq-
cobham:aviator_300cobham aviator 300eq-
cobham:aviator_350cobham aviator 350eq-
cobham:aviator_700dcobham aviator 700deq-
cobham:explorer_bgancobham explorer bganeq-
cobham:sailor_900_vsatcobham sailor 900 vsateq-
cobham:sailor_fleetbroadband_150cobham sailor fleetbroadband 150eq-
cobham:sailor_fleetbroadband_250cobham sailor fleetbroadband 250eq-
cobham:sailor_fleetbroadband_500cobham sailor fleetbroadband 500eq-

CPE	Name	Operator	Version
cobham:aviator_200	cobham aviator 200	eq	-
cobham:aviator_300	cobham aviator 300	eq	-
cobham:aviator_350	cobham aviator 350	eq	-
cobham:aviator_700d	cobham aviator 700d	eq	-
cobham:explorer_bgan	cobham explorer bgan	eq	-
cobham:sailor_900_vsat	cobham sailor 900 vsat	eq	-
cobham:sailor_fleetbroadband_150	cobham sailor fleetbroadband 150	eq	-
cobham:sailor_fleetbroadband_250	cobham sailor fleetbroadband 250	eq	-
cobham:sailor_fleetbroadband_500	cobham sailor fleetbroadband 500	eq	-