The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default

Published 7 y ago 2019-10-10 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.5

v3.1 · NVD

CISA KEV

not known exploited

EPSS

0.3%

percentile 21%

Public exploits

none known

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.

Exploit prediction (EPSS)

0.28% probability of exploitation in the next 30 days, higher than 21% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	5.5	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`
NVD	2.0	4.9	`AV:L/AC:L/Au:N/C:N/I:C/A:N`

Affected products

Cobham plc Explorer 710

Classification

Weakness

CWE-284 Improper Access Control
CWE-306 Missing Authentication for Critical Functionality

References

kb.cert.org /vuls/id/719689/ · third-party-advisory, x_refsource_CERT-VN, x_transferred

Sources

CVE List: CVE-2019-9529
NVD: CVE-2019-9529

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.