CVE:CVE-2018-19391
CNNVD:CNNVD-201903-585
Cobham Satcom Sailor 250和Cobham Satcom Sailor 500都是英国Cobham公司的一款船载海事卫星宽带终端设备。
使用1.25之前版本固件的Cobham Satcom Sailor 250和500中存在跨站脚本漏洞。远程攻击者可借助name字段利用该漏洞注入可执行的JavaScript代码。
solution:Upgrade cobham satcom_sailor_250_firmware to a higher version than 1.25,and avoid the version (,1.25); Upgrade cobham satcom_sailor_500_firmware to a higher version than 1.25,and avoid the version (,1.25)