CVE Feed

    Dashboard / CVE / CVE-2023-44855

    CVE-2023-44855

    Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdiag, sender, and recipients parameters of the sub_219C4 function in the acu_web file.

    Published:Apr 12, 2024
    Last Modified:May 28, 2025
    EPS:Apr 12, 2024
    EPSS Score:0.00258
    CVSS Score:6.5

    Affected Products

    Vendor
    Cobham
    Product
    Sailor 600 Vsat Ku
    Vendor
    Cobham
    Product
    Sailor 600 Vsat Ku Firmware
    Vendor
    Cobham
    Product
    Sailor 800 Vsat
    Vendor
    Cobham
    Product
    Sailor 900 Vsat

    Exploits

    https://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Diagnostics-report-019462dcebf6428da34dd7daee21583bhttps://pine-amphibian-9b9.notion.site/ENG-SAILOR-Ku-Software-XSS-Diagnostics-report-019462dcebf6428da34dd7daee21583b

    Related CVEs

    CVE-2023-44854 (CVSS 6.1) — Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execu…
    CVE-2023-44852 (CVSS 8.2) — Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execu…
    CVE-2023-44853 (CVSS 4.8) — \An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary cod…
    CVE-2023-44857 (CVSS 8.1) — An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted …
    CVE-2023-44856 (CVSS 6.1) — Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execu…
    CVE-2019-16320 (CVSS 5.3) — Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive informa…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High