Vulnerabilities > Cobham > SEA TEL 116 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-01-08 CVE-2018-5071 Cross-site Scripting vulnerability in Cobham SEA TEL 116 Firmware 222429
Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command.
network
low complexity
cobham CWE-79
5.4