Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Sailor 900 Firmware
Sailor 6000 Series Firmware
NVD
CVSS 2.0
10.0
EPSS
0.5%
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
RCE
Ailor 6110 Mini C Gmdss
Sailor 6006 Message Terminal
Sailor 6222 Vhf
Sailor 6300 Mf Hf
NVD
CVSS 2.0
9.3
EPSS
0.4%