The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to intercept or modify traffic, spoof or intercept GPS traffic, exfiltrate private data, hide a backdoor, or cause a denial-of-service.

Threat-Mapped Scoring

Score: 1.9

Priority: P3 - Important (Medium)

• S9 – Sabotage of System/App
• S10 – Denial of Service (+0.1 bonus)

EPSS

Score: 0.00061
Percentile: 0.19303

CVSS Scoring

Mapped CWE(s)

• CWE-494 : Download of Code Without Integrity Check

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1195.002 : Compromise Software Supply Chain
  Kill Chain: initial-access
• T1072 : Software Deployment Tools
  Kill Chain: execution
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1072 : Software Deployment Tools
  Kill Chain: execution
• T1185 : Browser Session Hijacking
  Kill Chain: collection
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1195.002 : Compromise Software Supply Chain
  Kill Chain: initial-access
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:cobham:explorer_710_firmware:1.07:*:*:*:*:*:*:*

← Back to Home