What’s Vulnerable › Vulnerabilities
CVE-2019-9531: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commands
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-10-10 · updated 2026-06-17
- Weakness: CWE-284
Description
The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT) commands, including some that provide unauthenticated, shell-like access to the device.
Affected products
- Cobham plc Explorer 710: 1.07
References
Get alerted when CVE-2019-9531 or the next vulnerability affects your stack