CVE-2019-9532

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.

• CWE-319
• CWE-319

• https://kb.cert.org/vuls/id/719689/Third Party Advisory, US Government Resource
• https://kb.cert.org/vuls/id/719689/Third Party Advisory, US Government Resource

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9516Some HTTP/2 implementations are vulnerable to a header leak,…6.5
• CVE-2019-9517Some HTTP/2 implementations are vulnerable to unconstrained …7.5
• CVE-2019-9518Some HTTP/2 implementations are vulnerable to a flood of emp…7.5
• CVE-2019-9529The web application portal of the Cobham EXPLORER 710, firmw…5.5
• CVE-2019-9530The web root directory of the Cobham EXPLORER 710, firmware …5.5
• CVE-2019-9531The web application portal of the Cobham EXPLORER 710, firmw…9.8
• CVE-2019-9533The root password of the Cobham EXPLORER 710 is the same for…9.8
• CVE-2019-9534The Cobham EXPLORER 710, firmware version 1.07, does not val…7.8
• CVE-2019-9535A vulnerability exists in the way that iTerm2 integrates wit…9.8
• CVE-2019-9536Apple iPhone 3GS bootrom malloc implementation returns a non…6.8
• CVE-2019-9537: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9538: Improper Neutralization of Input During Web Page Generatio…6.1