Cobham Sea Tel 121 Firmware vulnerabilities

2 CVEs affecting Cobham Sea Tel 121 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5267, published 2018-01-08.

More from Cobham.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5267, published 2018-01-08. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or…
• CVE-2018-5266, published 2018-01-08. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE:…