PT-2018-17114
CVE-2018-5728
·
Published
2018-01-16
·
Updated
2018-02-02
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Cobham Sea Tel 121 build 222701
Description:
The issue allows remote attackers to obtain potentially sensitive information via a "cgi-bin/getSysStatus" API endpoint. This can include details such as the Latitude/Longitude of the ship or satellite information.
Recommendations:
For Cobham Sea Tel 121 build 222701, consider restricting access to the "cgi-bin/getSysStatus" API endpoint to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾