PT-2018-16850

CVE-2018-5267

·

Published

2018-01-08

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cobham Sea Tel 121 build 222701
Description The issue allows remote attackers to bypass authentication by making a direct request to specific HTML pages, including "MenuDealerGx.html", "MenuDealer.html", "MenuEuNCGx.html", "MenuEuNC.html", "MenuSysGx.html", or "MenuSys.html".
Recommendations For Cobham Sea Tel 121 build 222701, as a temporary workaround, consider restricting access to the mentioned HTML pages until a patch is available.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-5267
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com