// For flags

CVE-2018-19393

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation.

Los dispositivos Cobham Satcom Sailor 800 y 900 contenían una vulnerabilidad que permitía la escritura arbitraria de contenido en el archivo de configuración del sistema. Esto fue explotable mediante múltiples vectores de ataque, dependiendo de la configuración del dispositivo. Los análisis posteriores también indicaban que esta vulnerabilidad podría aprovecharse para lograr una condición de denegación de servicio (DoS); el dispositivo requeriría un restablecimiento de fábrica para volver a la operativa normal.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-11-20 CVE Reserved
  • 2019-03-15 CVE Published
  • 2024-08-05 CVE Updated
  • 2024-08-05 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cobham
Search vendor "Cobham"
 Satcom Sailor 800 Firmware
Search vendor "Cobham" for product "Satcom Sailor 800 Firmware"
--
Affected
in Cobham
Search vendor "Cobham"
 Satcom Sailor 800
Search vendor "Cobham" for product "Satcom Sailor 800"
--
Safe
Cobham
Search vendor "Cobham"
 Satcom Sailor 900 Firmware
Search vendor "Cobham" for product "Satcom Sailor 900 Firmware"
--
Affected
in Cobham
Search vendor "Cobham"
 Satcom Sailor 900
Search vendor "Cobham" for product "Satcom Sailor 900"
--
Safe