CVE-2019-16320

Published: Sep 15, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community.

Affected (11)

Products: Cobham: Sea Tel Coastal 18 Firmware, Sailor 600 Vsat Ku Firmware, Sailor 800 Vsat Firmware, Sailor 900 Vsat Firmware, Sailor 900 Vsat High Power Firmware, Sea Tel 4009 Vsat Broadband At Sea Firmware, Sea Tel 5012 Vsat Firmware, Sea Tel 6012 Vsat Ku Band Firmware, Sea Tel 6012 Vsat C Band Firmware, Sea Tel Usat30 Vsat Firmware, Sea Tel 4009 Vsat Mk3 Firmware

Cobham

11 products

Sea Tel Coastal 18 Firmware

Sailor 600 Vsat Ku Firmware

Sailor 800 Vsat Firmware

Sailor 900 Vsat Firmware

Sailor 900 Vsat High Power Firmware

Sea Tel 4009 Vsat Broadband At Sea Firmware

Sea Tel 5012 Vsat Firmware

Sea Tel 6012 Vsat Ku Band Firmware

Sea Tel 6012 Vsat C Band Firmware

Sea Tel Usat30 Vsat Firmware

Sea Tel 4009 Vsat Mk3 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel Coastal 18 Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel Coastal 18	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sailor 600 Vsat Ku Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sailor 600 Vsat Ku	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sailor 800 Vsat Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sailor 800 Vsat	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sailor 900 Vsat Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sailor 900 Vsat	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sailor 900 Vsat High Power Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sailor 900 Vsat High Power	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel 4009 Vsat Broadband At Sea Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel 4009 Vsat Broadband At Sea	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel 5012 Vsat Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel 5012 Vsat	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel 6012 Vsat Ku Band Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel 6012 Vsat Ku Band	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel 6012 Vsat C Band Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel 6012 Vsat C Band	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel Usat30 Vsat Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel Usat30 Vsat	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cobham Sea Tel 4009 Vsat Mk3 Firmware	From 170_224521 to 194_225444

Running on/with	Platform Versions
Cobham Sea Tel 4009 Vsat Mk3	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://misteralfa-hack.blogspot.com/2019/09/cobham-terminales-satelitales-seatel.html

Source: cve@mitre.org

Third Party Advisory

https://misteralfa-hack.blogspot.com/2019/09/cobham-terminales-satelitales-seatel.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.