Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11536 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/567 - http://www.securityfocus.com/bid/100000
CVE ID: CVE-2017-11537 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4019 - https://github.com/ImageMagick/ImageMagick/issues/560 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE ID: CVE-2017-11538 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/569 - http://www.securityfocus.com/bid/100003
CVE ID: CVE-2017-11539 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99936 - https://github.com/ImageMagick/ImageMagick/issues/582
CVE ID: CVE-2017-11540 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/581 - http://www.securityfocus.com/bid/99929
CVE ID: CVE-2017-11541 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.securityfocus.com/bid/99941 - https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print - https://access.redhat.com/errata/R
com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-11542 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim - http://www.securityfocus.com/bid/99940 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-11543 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.securityfocus.com/bid/99939 - https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-11544 State: REJECTED Published: 2017-07-23T03:00:00 Last Updated: 2017-08-21T13:57:01 Description: No description available.
CVE ID: CVE-2017-11545 State: REJECTED Published: 2017-07-23T03:00:00 Last Updated: 2017-08-21T13:57:01 Description: No description available.
CVE ID: CVE-2017-11546 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/83
CVE ID: CVE-2017-11547 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a setuid-root installation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/83
CVE ID: CVE-2017-11548 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/84 - https://www.exploit-db.com/exploits/42400/
CVE ID: CVE-2017-11549 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/83
CVE ID: CVE-2017-11550 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/85
CVE ID: CVE-2017-11551 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T18:12:40.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/85
CVE ID: CVE-2017-11552 State: PUBLISHED Published: 2017-08-01T13:00:00 Last Updated: 2024-08-05T18:12:40.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decoder_run function in decoder.c in libmad) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406 - http://seclists.org/fulldisclosure/2017/Jul/94 - https://www.exploit-db.com/exploits/42409/
CVE ID: CVE-2017-11553 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1471772
CVE ID: CVE-2017-11554 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2445 - https://bugzilla.redhat.com/show_bug.cgi?id=1471780
CVE ID: CVE-2017-11555 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1471782
CVE ID: CVE-2017-11556 State: PUBLISHED Published: 2017-07-23T03:00:00 Last Updated: 2024-08-05T18:12:40.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1471786
CVE ID: CVE-2017-11557 State: PUBLISHED Published: 2019-05-23T17:17:42 Last Updated: 2024-08-05T18:12:40.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - https://www.manageengine.com/ - http://applications.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738
CVE ID: CVE-2017-11559 State: PUBLISHED Published: 2019-05-23T17:09:19 Last Updated: 2024-08-05T18:12:40.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://opmanager.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736
CVE ID: CVE-2017-11560 State: PUBLISHED Published: 2019-05-23T17:07:27 Last Updated: 2024-08-05T18:12:40.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locations of the application. JavaScript inside the uploaded HTML is also interpreted by the application. Thus, an attacker can inject a malicious JavaScript payload inside the HTML file and upload it to the application. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://opmanager.com - ht
on. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://opmanager.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736
CVE ID: CVE-2017-11561 State: PUBLISHED Published: 2019-05-23T15:32:59 Last Updated: 2024-08-05T18:12:40.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" section. This functionality can be abused by a malicious user by uploading a web shell. Additional Analyst Notes: - CVE Program Container: References: - http://manageengine.com - http://opmanager.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736
CVE ID: CVE-2017-11562 State: PUBLISHED Published: 2017-12-18T17:00:00 Last Updated: 2024-08-05T18:12:40.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/ajKErVTP
CVE ID: CVE-2017-11563 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:12:40.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device. Additional Analyst Notes: - CVE Program Container: References: - https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the
- CVE Program Container: References: - https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf - http://seclists.org/fulldisclosure/2018/Aug/18
CVE ID: CVE-2017-11564 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T18:12:40.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack. Additional Analyst Notes: - CVE Program Container: References: - https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf - http://seclists.org/fulldisclosure/2018/Aug/19
CVE ID: CVE-2017-11565 State: PUBLISHED Published: 2017-07-23T20:00:00 Last Updated: 2024-08-05T18:12:40.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly (with a wrong assumption that the specific pathname would remain the same forever), which allows attackers to bypass intended AppArmor restrictions by leveraging the silent loss of this protection mechanism. NOTE: this does not affect systems, such as default Debian stretch installations, on which Tor startup relies on a syst
NOTE: this does not affect systems, such as default Debian stretch installations, on which Tor startup relies on a systemd unit file (instead of this tor.init script). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99933 - https://bugs.debian.org/869153
CVE ID: CVE-2017-11566 State: PUBLISHED Published: 2017-07-25T15:00:00 Last Updated: 2024-08-05T18:12:40.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppUse 4.0 allows shell command injection via a proxy field. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/shiham101/4807e3dea54ee0f0456c47fcd1400e97
CVE ID: CVE-2017-11567 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T18:12:40.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can be leveraged to execute arbitrary code remotely. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/MONGOOSE-WEB-SERVER-v6.5-CSRF-COMMAND-EXECUTION.txt - https://www.exploit-db.com/exploits/42614/ - http://seclists.org/fulldisclosure/20
VER-v6.5-CSRF-COMMAND-EXECUTION.txt - https://www.exploit-db.com/exploits/42614/ - http://seclists.org/fulldisclosure/2017/Sep/3
CVE ID: CVE-2017-11568 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/issues/3089 - http://www.debian.org/security/2017/dsa-3958
CVE ID: CVE-2017-11569 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3093
CVE ID: CVE-2017-11570 State: PUBLISHED Published: 2017-07-23T22:00:00Z Last Updated: 2024-09-16T19:31:53.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/issues/3097
CVE ID: CVE-2017-11571 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3087
CVE ID: CVE-2017-11572 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3092
CVE ID: CVE-2017-11573 State: PUBLISHED Published: 2017-07-23T22:00:00Z Last Updated: 2024-09-17T01:46:47.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/issues/3098
CVE ID: CVE-2017-11574 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/issues/3090 - http://www.debian.org/security/2017/dsa-3958
CVE ID: CVE-2017-11575 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3096
CVE ID: CVE-2017-11576 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3091
CVE ID: CVE-2017-11577 State: PUBLISHED Published: 2017-07-23T22:00:00 Last Updated: 2024-08-05T18:12:40.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3958 - https://github.com/fontforge/fontforge/issues/3088
CVE ID: CVE-2017-11578 State: PUBLISHED Published: 2019-07-02T20:33:14 Last Updated: 2024-08-05T18:12:40.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is con
less Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is connected to the Blipcare's device wireless network to easily sniff these values using a MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf
CVE ID: CVE-2017-11579 State: PUBLISHED Published: 2019-07-02T20:44:51 Last Updated: 2024-08-05T18:12:40.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is in vicinity of Wireless signal generated by the B