{"id":"CVE-2019-9530","aliases":["EUVD-2019-18902","GHSA-vfqg-r43j-x694"],"status":"published","title":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files","description":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00361,"percentile":0.30172,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2019-10-10T20:09:47Z","modified":"2026-06-17T02:43:54Z","products":[{"vendor":"cobham","product":"explorer_710_firmware"},{"vendor":"cobham plc","product":"explorer 710"}],"references":[{"url":"https://kb.cert.org/vuls/id/719689/","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9530"},{"url":"https://github.com/advisories/GHSA-vfqg-r43j-x694"}],"sources":{"cve":[{"id":"CVE-2019-9530","title":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files","description":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.","status":"published","published":"2019-10-10T20:09:47.669Z","modified":"2024-09-16T17:14:11.909Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:20:20.081405Z"}],"euvd":[{"id":"EUVD-2019-18902","description":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.","status":"published","published":"2019-10-10T20:09:47Z","modified":"2024-09-16T17:14:11Z","updated_at":"2026-11-03T00:55:44.31512Z"}],"ghsa":[{"id":"GHSA-vfqg-r43j-x694","title":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access...","description":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.","status":"published","published":"2022-05-24T16:58:36Z","modified":"2023-01-28T05:07:06Z","updated_at":"2026-11-02T14:44:29.724528Z"}],"nvd":[{"id":"CVE-2019-9530","description":"The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.","status":"published","published":"2019-10-10T20:15:11.27Z","modified":"2026-06-17T02:43:54.103Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:05:31.019577Z"}]}}