VAR-201408-0034
Vulnerability from variot - Updated: 2025-04-13 23:37Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code. Cobham Multiple product web interfaces are vulnerable to a password recovery mechanism. Cobham Multiple product web interfaces have a password reset mechanism. It ’s easy to analyze this mechanism, and the administrator account password can be altered ( CWE-640 ). CWE-640: Weak Password Recovery Mechanism for Forgotten Password http://cwe.mitre.org/data/definitions/640.htmlA remote attacker who accesses the web interface may reset the administrator password and operate the product. Cobham SATCOM is a satellite communications company. Multiple Cobham products are prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may lead to further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201408-0034",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "aviator 350",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "aviator 700d",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "sailor 900 vsat",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "aviator 200",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "sailor fleetbroadband 150",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "aviator 300",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "sailor fleetbroadband 500",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "explorer bgan",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": "sailor fleetbroadband 250",
"scope": "eq",
"trust": 1.6,
"vendor": "cobham",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "aviator 200",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "aviator 300",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "aviator 350",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "aviator 700d",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "explorer bgan",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "sailor 150 fleetbroadband",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "sailor 250 fleetbroadband",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "sailor 500 fleetbroadband",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "sailor 900 vsat",
"scope": null,
"trust": 0.8,
"vendor": "cobham plc",
"version": null
},
{
"model": "satcom",
"scope": null,
"trust": 0.6,
"vendor": "cobham",
"version": null
},
{
"model": "plc sailor fleetbroadband",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "5000"
},
{
"model": "plc sailor fleetbroadband",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "2500"
},
{
"model": "plc sailor fleetbroadband",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "1500"
},
{
"model": "plc sailor vsat",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "9000"
},
{
"model": "plc explorer bgan",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "0"
},
{
"model": "plc aviator",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "3500"
},
{
"model": "plc aviator",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "3000"
},
{
"model": "plc aviator",
"scope": "eq",
"trust": 0.3,
"vendor": "cobham",
"version": "2000"
},
{
"model": "plc aviator 700d",
"scope": null,
"trust": 0.3,
"vendor": "cobham",
"version": null
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "BID",
"id": "69148"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cobham:aviator_200",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:aviator_300",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:aviator_350",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:aviator_700d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:explorer_bgan",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:sailor_fleetbroadband_150",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:sailor_fleetbroadband_250",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:sailor_fleetbroadband_500",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cobham:sailor_900_vsat",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ruben Santamarta",
"sources": [
{
"db": "BID",
"id": "69148"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
}
],
"trust": 0.9
},
"cve": "CVE-2013-7180",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2013-7180",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"availabilityRequirement": "NOT DEFINED",
"baseScore": 7.8,
"collateralDamagePotential": "NOT DEFINED",
"confidentialityImpact": "COMPLETE",
"confidentialityRequirement": "NOT DEFINED",
"enviromentalScore": 4.7,
"exploitability": "FUNCTIONAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-7180",
"impactScore": 6.9,
"integrityImpact": "NONE",
"integrityRequirement": "NOT DEFINED",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"remediationLevel": "WORKAROUND",
"reportConfidence": "UNCOFIRMED",
"severity": "HIGH",
"targetDistribution": "MEDIUM",
"trust": 0.8,
"userInteractionRequired": null,
"vector_string": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "None",
"baseScore": 7.8,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2014-003711",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-05036",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-7180",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2013-7180",
"trust": 0.8,
"value": "HIGH"
},
{
"author": "IPA",
"id": "JVNDB-2014-003711",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2014-05036",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201408-146",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code. Cobham Multiple product web interfaces are vulnerable to a password recovery mechanism. Cobham Multiple product web interfaces have a password reset mechanism. It \u2019s easy to analyze this mechanism, and the administrator account password can be altered ( CWE-640 ). CWE-640: Weak Password Recovery Mechanism for Forgotten Password http://cwe.mitre.org/data/definitions/640.htmlA remote attacker who accesses the web interface may reset the administrator password and operate the product. Cobham SATCOM is a satellite communications company. Multiple Cobham products are prone to an information-disclosure vulnerability. \nAn attacker can leverage this issue to obtain sensitive information that may lead to further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-7180"
},
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "BID",
"id": "69148"
}
],
"trust": 3.15
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.kb.cert.org/vuls/id/602006",
"trust": 0.8,
"type": "unknown"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#602006",
"trust": 4.1
},
{
"db": "NVD",
"id": "CVE-2013-7180",
"trust": 3.3
},
{
"db": "BID",
"id": "69148",
"trust": 1.5
},
{
"db": "JVN",
"id": "JVNVU93326351",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2014-05036",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146",
"trust": 0.6
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "BID",
"id": "69148"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"id": "VAR-201408-0034",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-05036"
}
],
"trust": 1.3208333300000001
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-05036"
}
]
},
"last_update_date": "2025-04-13T23:37:39.028000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Aerospace and Security, SATCOM",
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "http://www.kb.cert.org/vuls/id/602006"
},
{
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/land-mobile-satcom-systems/products-and-services.aspx"
},
{
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/satellite-communication-at-sea/products-and-services/inmarsat-fleetbroadband.aspx"
},
{
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/land-mobile-satcom-systems/products-and-services/on-the-move-bgan.aspx"
},
{
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/land-mobile-satcom-systems/products-and-services/ultra-portable-bgan.aspx"
},
{
"trust": 0.8,
"url": "http://www.cobham.com/about-cobham/aerospace-and-security/about-us/satcom/cockpit-and-cabin-communication/products-and-services/swiftbroadband-systems.aspx"
},
{
"trust": 0.8,
"url": "http://cwe.mitre.org/data/definitions/640.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-7180"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu93326351/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-7180"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/69148"
},
{
"trust": 0.3,
"url": "www.cobham.com"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "BID",
"id": "69148"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#602006"
},
{
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"db": "BID",
"id": "69148"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-08-07T00:00:00",
"db": "CERT/CC",
"id": "VU#602006"
},
{
"date": "2014-08-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"date": "2014-08-07T00:00:00",
"db": "BID",
"id": "69148"
},
{
"date": "2014-08-11T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"date": "2014-08-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"date": "2014-08-15T11:15:42.827000",
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-08-07T00:00:00",
"db": "CERT/CC",
"id": "VU#602006"
},
{
"date": "2014-08-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-05036"
},
{
"date": "2014-08-07T00:00:00",
"db": "BID",
"id": "69148"
},
{
"date": "2014-08-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-003711"
},
{
"date": "2014-08-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201408-146"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2013-7180"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cobham SATCOM products\u0027 web interface contains a weak password recovery vulnerability",
"sources": [
{
"db": "CERT/CC",
"id": "VU#602006"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201408-146"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.