CVE-2019-9532 The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext

2019-10-0900:00:00

CWE-319

certcc

www.cve.org

8.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.

CNA Affected

[
  {
    "product": "Explorer 710",
    "vendor": "Cobham plc",
    "versions": [
      {
        "status": "affected",
        "version": "1.07"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/719689/