CVE-2018-5266 - CVE House
Back to Database
Status published High CVE-2018-5266

Cobham Sea Tel 121 build 222701 devices allow remote attackers...

Vulnerability Description

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5266

Credits & Attribution

No credits recorded in the NVD database.

References

More from cobham

View All →
CVE-2019-16320
Cobham Sea Tel v170 224521 through v194 225444 devices allow...
Medium 5.3
CVE-2018-5728
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Medium 5.3
CVE-2018-5267
Cobham Sea Tel 121 build 222701 devices allow remote attackers...
Critical 9.8
CVE-2018-5071
Persistent XSS exists in the web server on Cobham Sea...
Medium 5.4
CVE-2018-19394
Cobham Satcom Sailor 800 and 900 devices contained persistent XSS,...
Medium 4.8

Affected Vendor

Affected Software

sea tel 121 firmware
Vulnerable Versions:
222701

Timeline

Official Publish: January 8th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.