CVE-2019-9530 — MEDIUM (5.5)

Vulnerability Description

The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Cobham	Explorer 710 Firmware	1.07
Cobham	Explorer 710	-

Related Weaknesses (CWE)

CWE-284

References

https://kb.cert.org/vuls/id/719689/Third Party AdvisoryUS Government Resource
https://kb.cert.org/vuls/id/719689/Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2019-9530?

CVE-2019-9530 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected...

How severe is CVE-2019-9530?

CVE-2019-9530 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-9530?

Check the references section above for vendor advisories and patch information. Affected products include: Cobham Explorer 710 Firmware, Cobham Explorer 710.