CVE-2018-19393

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation.

• CWE-732

• https://cyberskr.com/blog/cobham-satcom-800-900.htmlThird Party Advisory
• https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3Third Party Advisory
• https://cyberskr.com/blog/cobham-satcom-800-900.htmlThird Party Advisory
• https://gist.github.com/CyberSKR/1ade6d887039465d635e27fcbcc817a3Third Party Advisory

Published

Mar 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19388FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
• CVE-2018-19389FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
• CVE-2018-1939IBM Cloud Private 3.1.1 could allow a remote attacker to con…6.8
• CVE-2018-19390FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
• CVE-2018-19391Cobham Satcom Sailor 250 and 500 devices before 1.25 contain…
• CVE-2018-19392Cobham Satcom Sailor 250 and 500 devices before 1.25 contain…
• CVE-2018-19394Cobham Satcom Sailor 800 and 900 devices contained persisten…
• CVE-2018-19395ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allo…
• CVE-2018-19396ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 al…
• CVE-2018-19404In YXcms 1.4.7, protected/apps/appmanage/controller/indexCon…
• CVE-2018-19406kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel …
• CVE-2018-19407The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the L…