Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the deviceβs TELNET shell built-in commands, as demonstrated by the βset ship nameβ command. This is similar to a Cross Protocol Injection with SNMP.
CPE | Name | Operator | Version |
---|---|---|---|
sea_tel_116_firmware | eq | 222429 |