{"containers": {"cna": {"affected": [{"product": "Explorer 710", "vendor": "Cobham plc", "versions": [{"status": "affected", "version": "1.07"}]}], "credits": [{"lang": "en", "value": "This issue was found by Kyle O'Meara and David Belasco."}], "datePublic": "2019-10-09T00:00:00", "descriptions": [{"lang": "en", "value": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319: Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-10-10T20:09:47", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"name": "VU#719689", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "https://kb.cert.org/vuls/id/719689/"}], "source": {"discovery": "UNKNOWN"}, "title": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext", "x_generator": {"engine": "Vulnogram 0.0.8"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@cert.org", "DATE_PUBLIC": "2019-10-09T04:00:00.000Z", "ID": "CVE-2019-9532", "STATE": "PUBLIC", "TITLE": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Explorer 710", "version": {"version_data": [{"version_affected": "=", "version_name": "1.07", "version_value": "1.07"}]}}]}, "vendor_name": "Cobham plc"}]}}, "credit": [{"lang": "eng", "value": "This issue was found by Kyle O'Meara and David Belasco."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal."}]}, "generator": {"engine": "Vulnogram 0.0.8"}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-319: Cleartext Transmission of Sensitive Information"}]}]}, "references": {"reference_data": [{"name": "VU#719689", "refsource": "CERT-VN", "url": "https://kb.cert.org/vuls/id/719689/"}]}, "source": {"discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2019-9532", "datePublished": "2019-10-09T00:00:00", "dateReserved": "2019-03-01T00:00:00", "dateUpdated": "2019-10-10T20:09:47", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cobham:explorer_710_firmware:1.07:*:*:*:*:*:*:*", "matchCriteriaId": "ADA493F5-3AA0-4A1E-81CD-1AE01B9BD4D8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cobham:explorer_710:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEF6DB4B-2304-4E4C-92A1-BAF622E39BF1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal."}, {"lang": "es", "value": "El portal de aplicaciones web del Cobham EXPLORER 710, versi\u00f3n de firmware 1.07, env\u00eda la contrase\u00f1a de inicio de sesi\u00f3n en texto sin cifrar. Esto podr\u00eda permitir a un atacante local no autenticado interceptar la contrase\u00f1a y obtener acceso al portal."}], "id": "CVE-2019-9532", "lastModified": "2019-10-17T16:31:33.957", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-10-10T20:15:11.410", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://kb.cert.org/vuls/id/719689/"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-319"}], "source": "cret@cert.org", "type": "Secondary"}]}

{}