Cobham
Monthly
Remote command injection in Cobham SATCOM VSAT7090 Maritime Satellite Router (all versions through build 20260704) allows low-privileged remote attackers to execute arbitrary OS commands by supplying maliciously crafted sender or recipients values within JSON-parsed mail report configuration. The vulnerable function c_set_reports_decode in mail-report.sh passes these arguments unsanitized to shell commands, yielding full device compromise. A public proof-of-concept exploit exists, the vendor has not responded to coordinated disclosure, and no patch is available - creating an unmitigated remote code execution exposure on an operational maritime communications device.
The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship,. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges. Rated medium severity (CVSS 6.9). No vendor patch available.
Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Remote command injection in Cobham SATCOM VSAT7090 Maritime Satellite Router (all versions through build 20260704) allows low-privileged remote attackers to execute arbitrary OS commands by supplying maliciously crafted sender or recipients values within JSON-parsed mail report configuration. The vulnerable function c_set_reports_decode in mail-report.sh passes these arguments unsanitized to shell commands, yielding full device compromise. A public proof-of-concept exploit exists, the vendor has not responded to coordinated disclosure, and no patch is available - creating an unmitigated remote code execution exposure on an operational maritime communications device.
The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship,. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges. Rated medium severity (CVSS 6.9). No vendor patch available.
Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.
Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.