{"id":"CVE-2018-19392","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-19392","generatedAt":"2026-10-29T00:38:35.627Z","title":"Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability.","description":"Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password (including the default \"admin\" account), without prior knowledge of their password. All that is required is knowledge of the username and attack vector (/index.lua?pageID=Administration usernameAdmChange, passwordAdmChange1, and passwordAdmChange2 fields).","published":"2019-03-15T16:29:00.000Z","lastModified":"2026-06-17T01:49:14.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":["cobham/satcom sailor 250 firmware","cobham/satcom sailor 500 firmware"],"epss":{"score":0.01408,"percentile":0.72479,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://cyberskr.com/blog/cobham-satcom-250-500.html","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://gist.github.com/CyberSKR/2dfd5dccb20a209ec4d35b2678bac0d4","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://cyberskr.com/blog/cobham-satcom-250-500.html","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/CyberSKR/2dfd5dccb20a209ec4d35b2678bac0d4","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-19392","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}