VULNERABILITY INTELLIGENCE

CVE-2019-9529

CVSS score5.5 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2019-10-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.

Weakness classification

CWE-284: Improper Access Control
CWE-306: Missing Authentication for Critical Function

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource