PT-2019-19688

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The issue allows unauthenticated access to a specific port, which could enable a remote attacker to execute certain commands, including some that provide shell-like access to the device...

PT-2019-19687

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The issue concerns the lack of access restrictions on the web root directory, allowing an unauthenticated, local attacker connected to the device to access and download any file found in th...

PT-2019-19686

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The web application portal of the device has no authentication by default, allowing an unauthenticated, local attacker connected to the device to access the portal and make any changes to t...

PT-2019-19691 · Cobham · Cobham Explorer 710

Name of the Vulnerable Software and Affected Versions: Cobham EXPLORER 710 firmware version 1.07 Description: The issue concerns the lack of firmware image validation in the device. Development scripts that were left in the firmware can be exploited to upload a custom firmware image. This could...

CVE-2019-9534: Download of Code Without Integrity Check

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to...

PT-2019-19689

Name of the Vulnerable Software and Affected Versions Cobham EXPLORER 710 firmware version 1.07 Description The web application portal of the Cobham EXPLORER 710 sends the login password in cleartext, potentially allowing an unauthenticated, local attacker to intercept the password and gain acces...

CVE-2019-9529: Improper Access Control

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device...

CVE-2019-9531: Improper Access Control

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention AT commands, including some that provide unauthenticated,...

Cobham EXPLORER 710 Multiple Security Vulnerabilities

Description Cobham EXPLORER 710 is prone to multiple security vulnerabilities: 1. Multiple security weaknesses 2. Multiple access-bypass vulnerabilities 3. An information-disclosure vulnerability 4. An arbitrary file upload vulnerability An attacker may exploit these issues to perform certain...

Multiple vulnerabilities found in the Cobham EXPLORER 710 satcom terminal

Overview CERT/CC researchers examined the satcom terminal Cobham EXPLORER 710 as an expansion of work from IOActive’s findings in 2014. They discovered multiple new vulnerabilities affecting the device and the firmware, some of which could allow an unauthenticated, local attacker to gain access t...