Vulnerability-Lookup

CNVD-2019-07545

Vulnerability from cnvd - Published: 2019-03-20

Title

Cobham Satcom Sailor 800和900访问控制错误漏洞

Description

Cobham Satcom Sailor 800和Cobham Satcom Sailor 900都是英国Cobham公司的一款船载海事卫星宽带终端设备。 Cobham Satcom Sailor 800和900中存在访问控制错误漏洞。远程攻击者可利用该漏洞向系统的配置文件中写入内容或造成拒绝服务。务。

Severity

高

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://www.cobham.com/

Reference

https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3

Impacted products

Name
['Cobham Satcom Sailor 800', 'Cobham Satcom Sailor 900']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-19393"
    }
  },
  "description": "Cobham Satcom Sailor 800\u548cCobham Satcom Sailor 900\u90fd\u662f\u82f1\u56fdCobham\u516c\u53f8\u7684\u4e00\u6b3e\u8239\u8f7d\u6d77\u4e8b\u536b\u661f\u5bbd\u5e26\u7ec8\u7aef\u8bbe\u5907\u3002\n\nCobham Satcom Sailor 800\u548c900\u4e2d\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5411\u7cfb\u7edf\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\u5199\u5165\u5185\u5bb9\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002 \u52a1\u3002",
  "discovererName": "unKnow",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.cobham.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-07545",
  "openTime": "2019-03-20",
  "products": {
    "product": [
      "Cobham Satcom Sailor 800",
      "Cobham Satcom Sailor 900"
    ]
  },
  "referenceLink": "https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3",
  "serverity": "\u9ad8",
  "submitTime": "2019-03-19",
  "title": "Cobham Satcom Sailor 800\u548c900\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2018-19393 (GCVE-0-2018-19393)

Vulnerability from cvelistv5 – Published: 2019-03-15 16:00 – Updated: 2024-08-05 11:37

Summary

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

2 references

URL	Tags
https://gist.github.com/CyberSKR/1ade6d887039465d…	x_refsource_MISC
https://cyberskr.com/blog/cobham-satcom-800-900.html	x_refsource_MISC

Date Public

2019-03-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:37:10.744Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cyberskr.com/blog/cobham-satcom-800-900.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-03-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system\u0027s configuration file. This was exploitable via multiple attack vectors depending on the device\u0027s configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-15T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cyberskr.com/blog/cobham-satcom-800-900.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19393",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system\u0027s configuration file. This was exploitable via multiple attack vectors depending on the device\u0027s configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3",
              "refsource": "MISC",
              "url": "https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3"
            },
            {
              "name": "https://cyberskr.com/blog/cobham-satcom-800-900.html",
              "refsource": "MISC",
              "url": "https://cyberskr.com/blog/cobham-satcom-800-900.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19393",
    "datePublished": "2019-03-15T16:00:00.000Z",
    "dateReserved": "2018-11-20T00:00:00.000Z",
    "dateUpdated": "2024-08-05T11:37:10.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2019-07545

CVE-2018-19393 (GCVE-0-2018-19393)

Tags

Sightings

Nomenclature

Related by attack behaviour