CVE-2018-5266

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-01-08 · updated 2026-06-17
Weakness: CWE-200

Description

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.

Affected products

Cobham Sea Tel 121 Firmware: 222701

References

http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html
http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html

Get alerted when CVE-2018-5266 or the next vulnerability affects your stack