CVE-2019-9534

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to intercept or modify traffic, spoof or intercept GPS traffic, exfiltrate private data, hide a backdoor, or cause a denial-of-service.

• CWE-494
• CWE-494

• https://kb.cert.org/vuls/id/719689/Third Party Advisory, US Government Resource
• https://kb.cert.org/vuls/id/719689/Third Party Advisory, US Government Resource

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9518Some HTTP/2 implementations are vulnerable to a flood of emp…7.5
• CVE-2019-9529The web application portal of the Cobham EXPLORER 710, firmw…5.5
• CVE-2019-9530The web root directory of the Cobham EXPLORER 710, firmware …5.5
• CVE-2019-9531The web application portal of the Cobham EXPLORER 710, firmw…9.8
• CVE-2019-9532The web application portal of the Cobham EXPLORER 710, firmw…7.8
• CVE-2019-9533The root password of the Cobham EXPLORER 710 is the same for…9.8
• CVE-2019-9535A vulnerability exists in the way that iTerm2 integrates wit…9.8
• CVE-2019-9536Apple iPhone 3GS bootrom malloc implementation returns a non…6.8
• CVE-2019-9537: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9538: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9539: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9540: Improper Neutralization of Input During Web Page Generatio…6.1