Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges. Rated medium severity (CVSS 6.9). No vendor patch available.
Information Disclosure
Aviator 700D
Aviator 700E
Cobham
NVD
CVSS 2.0
6.9
EPSS
0.1%
The CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.
Information Disclosure
Google
Ameba
NVD
CVSS 2.0
5.8
EPSS
0.2%