Cobham Sea Tel 121 Build 222701 Devices Information Disclosure Vulnerability

CVE-2018-5266 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.

Learn more about our User Device Pen Test.