CVE-2018-5266: Cobham Sea Tel 121 Firmware

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.

Affected products

• Cobham Sea Tel 121 Firmware: version 222701 only

Published 2018-01-08. Last modified 2026-06-17.