CVE-2018-19391

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Satcom Sailor 250 Firmware (Cobham)
• Satcom Sailor 500 Firmware (Cobham)

References

• https://cyberskr.com/blog/cobham-satcom-250-500.html
• https://gist.github.com/CyberSKR/f6fc93702b9b9b73afa07877d1479fe0