CVE-2018-19392

Cobham Satcom Sailor 250/500 devices before firmware 1.25 have an unauthenticated password-reset vulnerability that lets a remote attacker change any user password (including admin) using the username and the attack vector /index.lua?pageID=Administration with fields usernameAdmChange, passwordAd...