CVE-2018-5267

CVE-2018-5267 is a critical authentication bypass vulnerability affecting Cobham Sea Tel 121 devices and their firmware. Attackers can gain unauthorized access by directly requesting specific administrative HTML pages, bypassing the login mechanism entirely. This unauthenticated, low-complexity attack allows for complete compromise of confidentiality, integrity, and availability, as reflected by its CVSS score of 9.8. While there is no known active exploitation, public exploit code, or Metasploit module, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.