CVEvulnerability
CVE-2018-19393
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-732
Description
Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation.
Affected configurations
• cobham satcom sailor 800 firmware
• cobham satcom sailor 900 firmware
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://cyberskr.com/blog/cobham-satcom-800-900.html Third Party Advisory
- https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3 Third Party Advisory
- https://cyberskr.com/blog/cobham-satcom-800-900.html Third Party Advisory
- https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3 Third Party Advisory