Description (CNA)
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://cyberskr.com/blog/cobham-satcom-250-500.html
- https://gist.github.com/CyberSKR/f6fc93702b9b9b73afa07877d1479fe0
ADP enrichment
No English description supplied.