Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges. Rated medium severity (CVSS 6.9). No vendor patch available.
Information Disclosure
Aviator 700D
Aviator 700E
NVD
CVSS 2.0
6.9
EPSS
0.1%
The CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.
Google
Information Disclosure
Ameba
NVD
CVSS 2.0
5.8
EPSS
0.2%