Cobham Satcom Sailor 900 Firmware vulnerabilities

2 CVEs affecting Cobham Satcom Sailor 900 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19394, published 2019-03-15.

More from Cobham.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-19393, published 2019-03-15. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors…
• CVE-2018-19394, published 2019-03-15. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration…