Persistent XSS Vulnerability in Cobham Sea Tel Satellite Communication System
CVE-2018-5071

5.4MEDIUM

Key Information:

Vendor

Cobham

Status
Sea Tel 116 Firmware
Vendor
CVE Published:
8 January 2018

What is CVE-2018-5071?

The Cobham Sea Tel 116 satellite communication system contains a persistent XSS vulnerability within its web server, allowing remote attackers to inject malicious JavaScript code through the TELNET shell. By utilizing built-in commands, such as the 'set ship name', unauthorized individuals can alter the device's behavior and potentially gain control over its functionalities. This vulnerability resembles cross-protocol injection techniques typically seen with SNMP, posing a significant risk to devices in operational environments.

References

http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-t...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.