CVE-2018-5071 - CVE House
Back to Database
Status published Medium CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea...

Vulnerability Description

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross Protocol Injection with SNMP.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5071

Credits & Attribution

No credits recorded in the NVD database.

References

More from cobham

View All →
CVE-2019-16320
Cobham Sea Tel v170 224521 through v194 225444 devices allow...
Medium 5.3
CVE-2018-5728
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Medium 5.3
CVE-2018-5267
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Critical 9.8
CVE-2018-5266
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
High 7.5
CVE-2018-19394
Cobham Satcom Sailor 800 and 900 devices contained persistent XSS,...
Medium 4.8

Affected Vendor

Affected Software

sea tel 116 firmware
Vulnerable Versions:
222429

Timeline

Official Publish: January 8th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.