[
 {
  "cve": "CVE-2026-94216",
  "published": "2026-09-21",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "2.1",
  "severite": "LOW",
  "cwe": "CWE-93 CWE-113",
  "produit": "",
  "resume": "A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to ht…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94216",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-94214",
  "published": "2026-09-21",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "2.1",
  "severite": "LOW",
  "cwe": "CWE-601",
  "produit": "",
  "resume": "A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94214",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-81855",
  "published": "2026-09-15",
  "fabricant": "Wärtsilä",
  "famille": "machine",
  "score": "9.3",
  "severite": "CRITICAL",
  "cwe": "CWE-321",
  "produit": "",
  "resume": "A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81855",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-258-02",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-78225",
  "published": "2026-09-15",
  "fabricant": "Wärtsilä",
  "famille": "machine",
  "score": "9.5",
  "severite": "CRITICAL",
  "cwe": "CWE-321",
  "produit": "",
  "resume": "A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78225",
  "vecteur": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-258-02",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-38058",
  "published": "2026-09-11",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "8.6",
  "severite": "HIGH",
  "cwe": "CWE-497",
  "produit": "",
  "resume": "The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with vali…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38058",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-183-01",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-38056",
  "published": "2026-09-11",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "9.4",
  "severite": "CRITICAL",
  "cwe": "CWE-862",
  "produit": "",
  "resume": "A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deployed across oil and gas, maritime, defense, and remote infrastructure as the prima…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38056",
  "vecteur": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-183-01",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-83772",
  "published": "2026-09-01",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "8.6",
  "severite": "HIGH",
  "cwe": "CWE-74 CWE-77",
  "produit": "",
  "resume": "A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argumen…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83772",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-15203",
  "published": "2026-08-26",
  "fabricant": "Danfoss (Drives, Editron, Power Solutions)",
  "famille": "machine",
  "score": "9.3",
  "severite": "CRITICAL",
  "cwe": "CWE-1191",
  "produit": "",
  "resume": "Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload un…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15203",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-67578",
  "published": "2026-08-25",
  "fabricant": "Furuno",
  "famille": "navigation",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-306",
  "produit": "FURUNO FA-50 Class B AIS Transponder",
  "resume": "",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67578",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "cisa-ics",
  "avis": "ICSA-26-237-07",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-59769",
  "published": "2026-08-25",
  "fabricant": "Furuno",
  "famille": "navigation",
  "score": "9.1",
  "severite": "CRITICAL",
  "cwe": "CWE-798",
  "produit": "FURUNO FA-50 Class B AIS Transponder",
  "resume": "",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59769",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "cisa-ics",
  "avis": "ICSA-26-237-07",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-19918",
  "published": "2026-08-16",
  "fabricant": "SpaceX Starlink",
  "famille": "satcom",
  "score": "2.1",
  "severite": "LOW",
  "cwe": "CWE-266 CWE-284",
  "produit": "",
  "resume": "A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only b…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19918",
  "vecteur": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-38059",
  "published": "2026-07-10",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "8.7",
  "severite": "HIGH",
  "cwe": "CWE-306",
  "produit": "",
  "resume": "The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve sensitive device information including the serial number, Device ID (DID), Termin…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38059",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-183-01",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-38057",
  "published": "2026-07-10",
  "fabricant": "ST Engineering iDirect",
  "famille": "satcom",
  "score": "7.0",
  "severite": "HIGH",
  "cwe": "CWE-352",
  "produit": "",
  "resume": "The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attac…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-38057",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-183-01",
  "correctif": "non"
 },
 {
  "cve": "CVE-2026-58459",
  "published": "2026-07-09",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "8.4",
  "severite": "HIGH",
  "cwe": "CWE-78",
  "produit": "gpsd project gpsd",
  "resume": "gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads i…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58459",
  "vecteur": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-56790",
  "published": "2026-06-25",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "7.0",
  "severite": "HIGH",
  "cwe": "CWE-193",
  "produit": "",
  "resume": "CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56790",
  "vecteur": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-56814",
  "published": "2026-06-15",
  "fabricant": "OpenCPN",
  "famille": "navigation",
  "score": "7.8",
  "severite": "HIGH",
  "cwe": "CWE-77",
  "produit": "",
  "resume": "A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metacharacters.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-56814",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-21404",
  "published": "2026-06-04",
  "fabricant": "NAVTOR",
  "famille": "navigation",
  "score": "5.8",
  "severite": "MEDIUM",
  "cwe": "CWE-798",
  "produit": "navtor navbox firmware",
  "resume": "NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can extract credentials to bypass the intende…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21404",
  "vecteur": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-44611",
  "published": "2026-05-29",
  "fabricant": "toutes marques",
  "famille": "vdr",
  "score": "5.9",
  "severite": "MEDIUM",
  "cwe": "CWE-916",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44611",
  "vecteur": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-148-01",
  "correctif": "oui"
 },
 {
  "cve": "CVE-2026-42951",
  "published": "2026-05-29",
  "fabricant": "toutes marques",
  "famille": "vdr",
  "score": "5.9",
  "severite": "MEDIUM",
  "cwe": "CWE-522",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42951",
  "vecteur": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-148-01",
  "correctif": "oui"
 },
 {
  "cve": "CVE-2026-42941",
  "published": "2026-05-29",
  "fabricant": "toutes marques",
  "famille": "vdr",
  "score": "8.7",
  "severite": "HIGH",
  "cwe": "CWE-1392",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42941",
  "vecteur": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-148-01",
  "correctif": "oui"
 },
 {
  "cve": "CVE-2026-42929",
  "published": "2026-05-29",
  "fabricant": "toutes marques",
  "famille": "vdr",
  "score": "8.7",
  "severite": "HIGH",
  "cwe": "CWE-798",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42929",
  "vecteur": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-148-01",
  "correctif": "oui"
 },
 {
  "cve": "CVE-2026-40425",
  "published": "2026-05-29",
  "fabricant": "toutes marques",
  "famille": "vdr",
  "score": "6.9",
  "severite": "MEDIUM",
  "cwe": "CWE-552",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40425",
  "vecteur": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd cisa-ics",
  "avis": "ICSA-26-148-01",
  "correctif": "oui"
 },
 {
  "cve": "CVE-2026-29974",
  "published": "2026-05-08",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-121",
  "produit": "",
  "resume": "An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan on untrusted input are vulnerable to a st…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29974",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-31151",
  "published": "2026-04-06",
  "fabricant": "Kaleris",
  "famille": "port",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-288",
  "produit": "kaleris yard management solutions",
  "resume": "An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31151",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "terminal et port",
  "e26": "non",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-31150",
  "published": "2026-04-06",
  "fabricant": "Kaleris",
  "famille": "port",
  "score": "4.3",
  "severite": "MEDIUM",
  "cwe": "CWE-284 CWE-639",
  "produit": "kaleris yard management solutions",
  "resume": "Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31150",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
  "kev": "",
  "systeme": "terminal et port",
  "e26": "non",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2754",
  "published": "2026-03-06",
  "fabricant": "toutes marques",
  "famille": "navigation",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-306",
  "produit": "navtor navbox firmware",
  "resume": "Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2754",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2753",
  "published": "2026-03-06",
  "fabricant": "NAVTOR",
  "famille": "navigation",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-36",
  "produit": "navtor navbox firmware",
  "resume": "An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path input. Unauthenticated remote attackers can exploit this issue by submitting reque…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2753",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2752",
  "published": "2026-03-06",
  "fabricant": "NAVTOR",
  "famille": "navigation",
  "score": "5.3",
  "severite": "MEDIUM",
  "cwe": "CWE-209",
  "produit": "navtor navbox firmware",
  "resume": "Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2752",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2250",
  "published": "2026-02-11",
  "fabricant": "METIS Cyberspace Technology",
  "famille": "machine",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-215 CWE-284",
  "produit": "",
  "resume": "The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is conf…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2250",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2249",
  "published": "2026-02-11",
  "fabricant": "METIS Cyberspace Technology",
  "famille": "machine",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-287 CWE-306",
  "produit": "",
  "resume": "METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2249",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2026-2248",
  "published": "2026-02-11",
  "fabricant": "METIS Cyberspace Technology",
  "famille": "machine",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-287 CWE-306",
  "produit": "",
  "resume": "METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2248",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-67268",
  "published": "2026-01-02",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-122 CWE-1285",
  "produit": "gpsd project gpsd",
  "resume": "gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the u…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67268",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-67015",
  "published": "2025-12-26",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-284",
  "produit": "comtech cdm-625 firmware",
  "resume": "Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/admin_a…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67015",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-67780",
  "published": "2025-12-11",
  "fabricant": "SpaceX Starlink",
  "famille": "satcom",
  "score": "4.2",
  "severite": "MEDIUM",
  "cwe": "CWE-306",
  "produit": "",
  "resume": "SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header.…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67780",
  "vecteur": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-63210",
  "published": "2025-11-19",
  "fabricant": "Newtec (ST Engineering iDirect)",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-287 CWE-302 CWE-303",
  "produit": "newtec celoxa504 firmware",
  "resume": "The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-63210",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-5087",
  "published": "2025-06-24",
  "fabricant": "Kaleris",
  "famille": "port",
  "score": "6.0",
  "severite": "MEDIUM",
  "cwe": "CWE-319",
  "produit": "",
  "resume": "Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, includin…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5087",
  "vecteur": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "terminal et port",
  "e26": "non",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-2566",
  "published": "2025-06-24",
  "fabricant": "Kaleris",
  "famille": "port",
  "score": "9.3",
  "severite": "CRITICAL",
  "cwe": "CWE-502",
  "produit": "",
  "resume": "Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2566",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "terminal et port",
  "e26": "non",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-41380",
  "published": "2025-05-23",
  "fabricant": "Iridium",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-798",
  "produit": "",
  "resume": "Iridium Certus 700 version 1.0.1 has an embedded credentials vulnerability in the code. This vulnerability allows a local user to retrieve the SSH hash string.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41380",
  "vecteur": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2025-41379",
  "published": "2025-05-23",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "6.3",
  "severite": "MEDIUM",
  "cwe": "CWE-20",
  "produit": "",
  "resume": "The Intellian C700 web panel allows you to add firewall rules. Each of these rules has an associated ID, but there is a problem when adding a new rule, the ID used to create the database entry may be different from the JSON ID. If the rule…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41379",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2024-13503",
  "published": "2025-01-17",
  "fabricant": "Newtec (ST Engineering iDirect)",
  "famille": "satcom",
  "score": "9.5",
  "severite": "CRITICAL",
  "cwe": "CWE-120",
  "produit": "",
  "resume": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM (Updating signaling process in the swdownload binary modules) allows Local Execution of Code, R…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13503",
  "vecteur": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2024-13502",
  "published": "2025-01-17",
  "fabricant": "Newtec (ST Engineering iDirect)",
  "famille": "satcom",
  "score": "9.3",
  "severite": "CRITICAL",
  "cwe": "CWE-78",
  "produit": "",
  "resume": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NT…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13502",
  "vecteur": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44857",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "8.1",
  "severite": "HIGH",
  "cwe": "CWE-94",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_21D24 function in the acu_web component.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44857",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44856",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rstat, sender, and recipients' parameters of the sub_21D24 function in the acu_web …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44856",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44855",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "6.5",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote attacker to execute arbitrary code via a crafted script to the rdiag, sender, and recipients parameters of the sub_219C4 function in the acu_web fi…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44855",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44854",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_rslog_decode function in the acu_web file.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44854",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44853",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "4.8",
  "severite": "MEDIUM",
  "cwe": "CWE-94",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "\\An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub_219C4 function in the acu_web file.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44853",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-44852",
  "published": "2024-04-12",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "8.2",
  "severite": "HIGH",
  "cwe": "CWE-79",
  "produit": "cobham sailor 600 vsat ku firmware",
  "resume": "Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_traps_decode function in the acu_web file.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44852",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-52235",
  "published": "2024-04-05",
  "fabricant": "SpaceX Starlink",
  "famille": "satcom",
  "score": "8.8",
  "severite": "HIGH",
  "cwe": "CWE-350",
  "produit": "",
  "resume": "SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a reboot) via a DNS Rebinding attack.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52235",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-49965",
  "published": "2024-04-05",
  "fabricant": "SpaceX Starlink",
  "famille": "satcom",
  "score": "6.8",
  "severite": "MEDIUM",
  "cwe": "CWE-79 CWE-352",
  "produit": "",
  "resume": "SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49965",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2023-22971",
  "published": "2023-01-26",
  "fabricant": "Hughes Network Systems",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "hughes hx200 firmware",
  "resume": "Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include J…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22971",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2022-3792",
  "published": "2023-01-10",
  "fabricant": "GullsEye",
  "famille": "port",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-89",
  "produit": "gullseye gullseye terminal operating system",
  "resume": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3792",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "terminal et port",
  "e26": "non",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-6560",
  "published": "2020-03-23",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "9.1",
  "severite": "CRITICAL",
  "cwe": "CWE-640",
  "produit": "auto-maskin rp210e firmware",
  "resume": "In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the original password, but…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6560",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-6558",
  "published": "2020-03-23",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-521",
  "produit": "auto-maskin rp 210e firmware",
  "resume": "In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the original password, but…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6558",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-8001",
  "published": "2020-01-27",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-798",
  "produit": "intelliantech aptus",
  "resume": "The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8001",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-8000",
  "published": "2020-01-27",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-798",
  "produit": "intelliantech aptus web",
  "resume": "Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8000",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-7999",
  "published": "2020-01-27",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-798",
  "produit": "intelliantech aptus",
  "resume": "The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7999",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-7980",
  "published": "2020-01-25",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-78",
  "produit": "intelliantech aptus web",
  "resume": "Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7980",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-7244",
  "published": "2020-01-20",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "7.2",
  "severite": "HIGH",
  "cwe": "CWE-78",
  "produit": "comtech stampede fx-1010 firmware",
  "resume": "Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell metacharacters in the Router IP Address field. (In some cases, authe…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7244",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-7243",
  "published": "2020-01-20",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "7.2",
  "severite": "HIGH",
  "cwe": "CWE-78",
  "produit": "comtech stampede fx-1010 firmware",
  "resume": "Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7243",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-7242",
  "published": "2020-01-20",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "7.2",
  "severite": "HIGH",
  "cwe": "CWE-78",
  "produit": "comtech stampede fx-1010 firmware",
  "resume": "Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. (In some …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7242",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2020-5179",
  "published": "2020-01-02",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "7.2",
  "severite": "HIGH",
  "cwe": "CWE-78",
  "produit": "comtech stampede fx-1010 firmware",
  "resume": "Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. (In some cases, …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5179",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-15652",
  "published": "2019-11-22",
  "fabricant": "NSSLGlobal",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "nssglobal vmu software",
  "resume": "The web interface for NSSLGlobal SatLink VSAT Modem Unit (VMU) devices before 18.1.0 doesn't properly sanitize input for error messages, leading to the ability to inject client-side code.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15652",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-17667",
  "published": "2019-10-17",
  "fabricant": "Comtech",
  "famille": "satcom",
  "score": "5.4",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "comtech h8 heights remote gateway firmware",
  "resume": "Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name (aka SiteName) field.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17667",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9534",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.8",
  "severite": "HIGH",
  "cwe": "CWE-494",
  "produit": "cobham explorer 710 firmware",
  "resume": "The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local a…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9534",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9533",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-522 CWE-798",
  "produit": "cobham explorer 710 firmware",
  "resume": "The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the devi…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9533",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9532",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.8",
  "severite": "HIGH",
  "cwe": "CWE-319",
  "produit": "cobham explorer 710 firmware",
  "resume": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9532",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9531",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-284 CWE-287",
  "produit": "cobham explorer 710 firmware",
  "resume": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT)…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9531",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9530",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "5.5",
  "severite": "MEDIUM",
  "cwe": "CWE-284",
  "produit": "cobham explorer 710 firmware",
  "resume": "The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download a…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9530",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-9529",
  "published": "2019-10-10",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "5.5",
  "severite": "MEDIUM",
  "cwe": "CWE-284 CWE-306",
  "produit": "cobham explorer 710 firmware",
  "resume": "The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9529",
  "vecteur": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-17269",
  "published": "2019-10-07",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-78",
  "produit": "intelliantech remote access",
  "resume": "Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17269",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-16320",
  "published": "2019-09-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "5.3",
  "severite": "MEDIUM",
  "cwe": "CWE-200",
  "produit": "cobham sea tel coastal 18 firmware",
  "resume": "Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16320",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-19394",
  "published": "2019-03-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "4.8",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham satcom sailor 800 firmware",
  "resume": "Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a r…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19394",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-19393",
  "published": "2019-03-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-732",
  "produit": "cobham satcom sailor 800 firmware",
  "resume": "Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19393",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-19392",
  "published": "2019-03-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-287",
  "produit": "cobham satcom sailor 250 firmware",
  "resume": "Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password (including the default \"admin\" account), without prior knowledge o…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19392",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-19391",
  "published": "2019-03-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "6.1",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham satcom sailor 250 firmware",
  "resume": "Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19391",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-2411",
  "published": "2019-01-16",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "7.6",
  "severite": "HIGH",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.0.8. Easily exploitable vulnerability …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2411",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-2410",
  "published": "2019-01-16",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "5.1",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: DGS RES Online, FMS Sender, FMS Receiver, OHC WPF Security). The supported version that is affe…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2410",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2019-2409",
  "published": "2019-01-16",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "6.7",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.0.8. Easily exploitable vulnerability …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2409",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-3181",
  "published": "2018-10-17",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "5.5",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The supported version that is affected is 8.0. Easily exploitable vulnerability all…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3181",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-3160",
  "published": "2018-10-17",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "7.7",
  "severite": "HIGH",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable v…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3160",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5402",
  "published": "2018-10-08",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "9.1",
  "severite": "CRITICAL",
  "cwe": "CWE-319 CWE-310",
  "produit": "auto-maskin rp 210e firmware",
  "resume": "The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN Impact: An attacker once authenticated can change configurations…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5402",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5401",
  "published": "2018-10-08",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "9.1",
  "severite": "CRITICAL",
  "cwe": "CWE-319",
  "produit": "auto-maskin rp 210e firmware",
  "resume": "The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The devices transmit process control in…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5401",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5400",
  "published": "2018-10-08",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "9.1",
  "severite": "CRITICAL",
  "cwe": "CWE-346",
  "produit": "auto-maskin rp 210e firmware",
  "resume": "The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices. The originating device sends a message in plaintext, 48:65:6c:6c:6f:20:57:6f:72:6c:64, \"H…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5400",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5399",
  "published": "2018-10-08",
  "fabricant": "Auto-Maskin",
  "famille": "machine",
  "score": "9.4",
  "severite": "CRITICAL",
  "cwe": "CWE-798",
  "produit": "auto-maskin dcu-210e firmware",
  "resume": "The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running. The Dropbear server is configured with a hard-coded user name and password combination of r…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5399",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
  "kev": "",
  "systeme": "propulsion et machines",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-17174",
  "published": "2018-09-21",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-787",
  "produit": "nmealib project nmealib",
  "resume": "A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using t…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17174",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-16705",
  "published": "2018-09-10",
  "fabricant": "Furuno",
  "famille": "navigation",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-200",
  "produit": "furuno felcom 250 firmware",
  "resume": "FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16705",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-16591",
  "published": "2018-09-10",
  "fabricant": "Furuno",
  "famille": "navigation",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-862",
  "produit": "furuno felcom 250 firmware",
  "resume": "FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected \"SMS\" panel via /cgi-bin/sm_changepassword.cgi and /cgi-bin/sm_sms_chan…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16591",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-16590",
  "published": "2018-09-06",
  "fabricant": "Furuno",
  "famille": "navigation",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-287",
  "produit": "furuno felcom 250 firmware",
  "resume": "FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-16590",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5386",
  "published": "2018-07-24",
  "fabricant": "Navarino",
  "famille": "satcom",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-288 CWE-200",
  "produit": "navarino infinity",
  "resume": "Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5386",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5385",
  "published": "2018-07-24",
  "fabricant": "Navarino",
  "famille": "satcom",
  "score": "8.8",
  "severite": "HIGH",
  "cwe": "CWE-384",
  "produit": "navarino infinity",
  "resume": "Navarino Infinity is prone to session fixation attacks. The server accepts the session ID as a GET parameter which can lead to bypassing the two factor authentication in some installations. This could lead to phishing attacks that can bypa…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5385",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5384",
  "published": "2018-07-24",
  "fabricant": "Navarino",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-89",
  "produit": "navarino infinity",
  "resume": "Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5384",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-3001",
  "published": "2018-07-18",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "6.2",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.x. Easily exploitable vulnerability al…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3001",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-3000",
  "published": "2018-07-18",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "7.1",
  "severite": "HIGH",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: SPMS Suite). The supported version that is affected is 8.x. Easily exploitable vulnerability al…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3000",
  "vecteur": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-9497",
  "published": "2018-07-13",
  "fabricant": "toutes marques",
  "famille": "satcom",
  "score": "8.8",
  "severite": "HIGH",
  "cwe": "CWE-288 CWE-287",
  "produit": "hughes hn7740s firmware",
  "resume": "Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authent…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9497",
  "vecteur": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-9496",
  "published": "2018-07-13",
  "fabricant": "toutes marques",
  "famille": "satcom",
  "score": "6.5",
  "severite": "MEDIUM",
  "cwe": "CWE-306",
  "produit": "hughes hn7740s firmware",
  "resume": "Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the mod…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9496",
  "vecteur": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-9495",
  "published": "2018-07-13",
  "fabricant": "toutes marques",
  "famille": "satcom",
  "score": "8.8",
  "severite": "HIGH",
  "cwe": "CWE-798",
  "produit": "hughes hn7740s firmware",
  "resume": "Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port (23) can be obtained through using one of a few default credentials shared among …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9495",
  "vecteur": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-9494",
  "published": "2018-07-13",
  "fabricant": "toutes marques",
  "famille": "satcom",
  "score": "6.5",
  "severite": "MEDIUM",
  "cwe": "CWE-20",
  "produit": "hughes hn7740s firmware",
  "resume": "Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9494",
  "vecteur": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-6551",
  "published": "2018-07-13",
  "fabricant": "Intellian",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-255",
  "produit": "intelliantech v60 firmware",
  "resume": "Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6551",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-2621",
  "published": "2018-01-18",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "8.2",
  "severite": "HIGH",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Mobile Gangway and Mustering). The supported version that is affected is 7.3.874. Easily exploi…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2621",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5728",
  "published": "2018-01-16",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "5.3",
  "severite": "MEDIUM",
  "cwe": "CWE-200",
  "produit": "cobham seatel 121 firmware",
  "resume": "Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5728",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5267",
  "published": "2018-01-08",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "",
  "produit": "cobham sea tel 121 firmware",
  "resume": "Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5267",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5266",
  "published": "2018-01-08",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.5",
  "severite": "HIGH",
  "cwe": "CWE-200",
  "produit": "cobham sea tel 121 firmware",
  "resume": "Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5266",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2018-5071",
  "published": "2018-01-08",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "5.4",
  "severite": "MEDIUM",
  "cwe": "CWE-79",
  "produit": "cobham sea tel 116 firmware",
  "resume": "Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by …",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5071",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2017-10361",
  "published": "2017-10-19",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "6.4",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC DRS). The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability a…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10361",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2017-10228",
  "published": "2017-08-08",
  "fabricant": "toutes marques",
  "famille": "bord",
  "score": "5.4",
  "severite": "MEDIUM",
  "cwe": "",
  "produit": "oracle hospitality cruise shipboard property management system",
  "resume": "Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: Module). The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability al…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10228",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
  "kev": "",
  "systeme": "non classé",
  "e26": "à examiner",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2017-3221",
  "published": "2017-07-22",
  "fabricant": "Inmarsat / Viasat",
  "famille": "satcom",
  "score": "9.8",
  "severite": "CRITICAL",
  "cwe": "CWE-89",
  "produit": "inmarsat amosconnect 8",
  "resume": "Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3221",
  "vecteur": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2016-9339",
  "published": "2017-02-13",
  "fabricant": "Interschalt",
  "famille": "vdr",
  "score": "5.3",
  "severite": "MEDIUM",
  "cwe": "CWE-22",
  "produit": "macgregor interschalt vdr g4e firmware",
  "resume": "An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allo…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9339",
  "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "kev": "",
  "systeme": "enregistrement de données",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2014-0327",
  "published": "2014-08-17",
  "fabricant": "Iridium",
  "famille": "satcom",
  "score": "9.3",
  "severite": "HIGH",
  "cwe": "",
  "produit": "iridium open port",
  "resume": "The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0327",
  "vecteur": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2014-0326",
  "published": "2014-08-17",
  "fabricant": "Iridium",
  "famille": "satcom",
  "score": "9.3",
  "severite": "HIGH",
  "cwe": "",
  "produit": "iridium open port",
  "resume": "The Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0326",
  "vecteur": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2014-2941",
  "published": "2014-08-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.1",
  "severite": "HIGH",
  "cwe": "",
  "produit": "cobham ailor 6110 mini-c gmdss",
  "resume": "Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states \"there is no possibility to exploit another user's credentials.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2941",
  "vecteur": "AV:N/AC:M/Au:N/C:N/I:C/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2014-2940",
  "published": "2014-08-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "10.0",
  "severite": "HIGH",
  "cwe": "",
  "produit": "cobham sailor 900 firmware",
  "resume": "Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2940",
  "vecteur": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2014-0328",
  "published": "2014-08-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "9.3",
  "severite": "HIGH",
  "cwe": "",
  "produit": "cobham ailor 6110 mini-c gmdss",
  "resume": "The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0328",
  "vecteur": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2013-7180",
  "published": "2014-08-15",
  "fabricant": "Cobham SATCOM / Thrane",
  "famille": "satcom",
  "score": "7.8",
  "severite": "HIGH",
  "cwe": "",
  "produit": "cobham aviator 200",
  "resume": "Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveragin…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7180",
  "vecteur": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2013-2038",
  "published": "2014-02-06",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "4.3",
  "severite": "MEDIUM",
  "cwe": "CWE-20",
  "produit": "gpsd project gpsd",
  "resume": "The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields an…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2038",
  "vecteur": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2013-6035",
  "published": "2014-02-04",
  "fabricant": "Inmarsat / Viasat",
  "famille": "satcom",
  "score": "10.0",
  "severite": "HIGH",
  "cwe": "CWE-287",
  "produit": "gatehouse gatehouse",
  "resume": "The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for s…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6035",
  "vecteur": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2013-6034",
  "published": "2014-02-04",
  "fabricant": "Inmarsat / Viasat",
  "famille": "satcom",
  "score": "10.0",
  "severite": "HIGH",
  "cwe": "CWE-255",
  "produit": "gatehouse gatehouse",
  "resume": "The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which make…",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6034",
  "vecteur": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "kev": "",
  "systeme": "communications",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2011-0524",
  "published": "2012-08-13",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "2.1",
  "severite": "LOW",
  "cwe": "CWE-119",
  "produit": "iain gypsy",
  "resume": "Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0524",
  "vecteur": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 },
 {
  "cve": "CVE-2010-0553",
  "published": "2010-02-04",
  "fabricant": "bibliothèques de décodage",
  "famille": "navigation",
  "score": "6.5",
  "severite": "MEDIUM",
  "cwe": "CWE-119",
  "produit": "geopp geo\\+\\+ gncaster",
  "resume": "Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence.",
  "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0553",
  "vecteur": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
  "kev": "",
  "systeme": "navigation",
  "e26": "oui",
  "sources": "nvd",
  "avis": "",
  "correctif": ""
 }
]