{"id":"CVE-2019-9529","state":"PUBLISHED","title":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default","description":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.","publishedAt":"2019-10-10T20:09:47.632Z","updatedAt":"2024-09-16T20:07:10.559Z","severity":null,"assigner":"certcc","products":["Cobham plc Explorer 710"],"affected":[{"vendor":"Cobham plc","product":"Explorer 710","versions":[{"version":"1.07","status":"affected"}]}],"references":["https://kb.cert.org/vuls/id/719689/"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T19:46:15.253Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/9xxx/CVE-2019-9529.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-9529","state":"PUBLISHED","datePublished":"2019-10-10T20:09:47.632Z","dateUpdated":"2024-09-16T20:07:10.559Z","assignerShortName":"certcc","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","dateReserved":"2019-03-01T00:00:00.000Z"},"containers":{"cna":{"title":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default","descriptions":[{"lang":"en","value":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device."}],"affected":[{"vendor":"Cobham plc","product":"Explorer 710","versions":[{"version":"1.07","status":"affected"}]}],"references":[{"url":"https://kb.cert.org/vuls/id/719689/","name":"VU#719689","tags":["third-party-advisory","x_refsource_CERT-VN"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"certcc","dateUpdated":"2019-10-10T20:09:47.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b"},"credits":[{"lang":"en","value":"This issue was found by Kyle O'Meara and David Belasco."}],"datePublic":"2019-10-09T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.8"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","DATE_PUBLIC":"2019-10-09T04:00:00.000Z","ID":"CVE-2019-9529","STATE":"PUBLIC","TITLE":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Explorer 710","version":{"version_data":[{"version_affected":"=","version_name":"1.07","version_value":"1.07"}]}}]},"vendor_name":"Cobham plc"}]}},"credit":[{"lang":"eng","value":"This issue was found by Kyle O'Meara and David Belasco."}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device."}]},"generator":{"engine":"Vulnogram 0.0.8"},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-284 Improper Access Control"}]}]},"references":{"reference_data":[{"name":"VU#719689","refsource":"CERT-VN","url":"https://kb.cert.org/vuls/id/719689/"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kb.cert.org/vuls/id/719689/","name":"VU#719689","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T21:54:44.511Z"}}]}}}