CVE-2018-5266

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-01-08

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Sea Tel 121 Firmware (Cobham)

References

• http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html