CVE-2019-9529 The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default

2019-10-0900:00:00

CWE-284

certcc

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.

CNA Affected

[
  {
    "product": "Explorer 710",
    "vendor": "Cobham plc",
    "versions": [
      {
        "status": "affected",
        "version": "1.07"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/719689/