What’s Vulnerable › Vulnerabilities

CVE-2018-19392

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-15 · updated 2026-06-17
• Weakness: CWE-287

Description

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password (including the default "admin" account), without prior knowledge of their password. All that is required is knowledge of the username and attack vector (/index.lua?pageID=Administration usernameAdmChange, passwordAdmChange1, and passwordAdmChange2 fields).

Affected products

• Cobham Satcom Sailor 250 Firmware: before 1.25 — fixed in 1.25
• Cobham Satcom Sailor 500 Firmware: before 1.25 — fixed in 1.25

How to fix

Upgrade to a fixed version: Cobham Satcom Sailor 250 Firmware 1.25; Cobham Satcom Sailor 500 Firmware 1.25. Check the vendor advisory for mitigations.

References

• https://cyberskr.com/blog/cobham-satcom-250-500.html
• https://gist.github.com/CyberSKR/2dfd5dccb20a209ec4d35b2678bac0d4
• https://cyberskr.com/blog/cobham-satcom-250-500.html
• https://gist.github.com/CyberSKR/2dfd5dccb20a209ec4d35b2678bac0d4

Get alerted when CVE-2018-19392 or the next vulnerability affects your stack