Cross Site Scripting (XSS) Vulnerability in Cobham SAILOR VSAT Ku v.164B019 Allows Remote Attacker to Execute Arbitrary Code
CVE-2023-44856

6.1MEDIUM

Key Information:

Vendor

Cobham

Status
Sailor 600 Vsat Ku Firmware
Vendor
CVE Published:
12 April 2024

What is CVE-2023-44856?

A vulnerability exists within Cobham's SAILOR VSAT Ku v.164B019 that exposes the system to Cross Site Scripting risks. This flaw enables remote attackers to execute arbitrary code by manipulating crafted scripts to exploit specific parameters in the acu_web file. The affected function, sub_21D24, is susceptible to attacks targeting the 'rstat', 'sender', and 'recipients' parameters. Such security loopholes pose significant risks to system integrity and data confidentiality, necessitating immediate attention and mitigation strategies.

References

https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Soft...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.