CVE-2019-9533CWE-522

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08

published October 10, 2019

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

⚠️ The root password for the Cobham EXPLORER 710 is the same across all firmware versions up to v1.08! It’s like every safe in a bank sharing the same code—yikes! Think of it as a restaurant where every table has the same secret recipe for the chef’s special dish. If someone knows the recipe, they can create chaos in the kitchen without even stepping in! An attacker could easily reverse-engineer that common password to gain access, leading to unauthorized control over the device. This could result in a multitude of issues, such as tampering with configurations or spying on communications—absolutely devastating for security!

Put simply

Think of it as a restaurant where every table has the same secret recipe for the chef’s special dish. If someone knows the recipe, they can create chaos in the kitchen without even stepping in! This vulnerability stems from the fact that the root password is hardcoded and identical across all versions of the firmware up to v1.08. It allows attackers to gain authenticated access simply by exploiting this predictable password.

What to do

An attacker could easily reverse-engineer that common password to gain access, leading to unauthorized control over the device. This could result in a multitude of issues, such as tampering with configurations or spying on communications—absolutely devastating for security! To mitigate this risk, update the firmware to the latest version where this vulnerability has been addressed. Additionally, ensure that the device's access controls are reviewed to prevent unauthorized access. Regularly check for firmware updates to keep the device secure! You've got this! Simply follow these steps, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01507 · 74.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2019-10-10T20:09Z
EPSS history
Timeline
  • 10 OCT 20:09Z
    The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08
    cvelistv5