Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the deviceβs TELNET shell built-in commands, as demonstrated by the βset ship nameβ command. This is similar to a Cross Protocol Injection with SNMP.