The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08
CVE-2019-9533

9.8CRITICAL

Key Information:

Vendor

Cobham Plc

Status
Explorer 710
Vendor
CVE Published:
10 October 2019

What is CVE-2019-9533?

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device.

Affected Version(s)

Explorer 710 1.08

References

https://kb.cert.org/vuls/id/719689/
third-party-advisoryx_refsource_CERT-VN

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was found by Kyle O'Meara and David Belasco.
.