Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6119 State: PUBLISHED Published: 2024-09-03T15:58:06.970Z Last Updated: 2024-09-12T16:03:01.704Z Vendors: OpenSSL Products: OpenSSL Problem Types: CWE-843 Description: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alt
ificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected DNS name, Email address or IP address. TLS servers rarely solicit client certificates, and even when they do, they generally don't perform a name check against a reference identifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS serve
tifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS servers are generally not affected and the severity of the issue is Moderate. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://openssl-library.org/news/secadv/20240903.txt - https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0 - https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f - https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2 - https://github.com/openssl/openss
- https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2 - https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6
CVE ID: CVE-2024-6120 State: PUBLISHED Published: 2024-06-21T23:33:48.423Z Last Updated: 2024-08-01T21:33:04.910Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: sparklewpthemes Products: Sparkle Demo Importer Problem Types: CWE-862 Missing Authorization Description: The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete all posts, pages, and uploaded files, as well as download and install a limited
riber-level access and above, to delete all posts, pages, and uploaded files, as well as download and install a limited set of demo plugins. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f411d17-5b0d-4a4a-afa8-7efebf6965f2?source=cve - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L446 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L469 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L497 - https://plugins.trac.wordpress.org
rdpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L497 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L519 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L595 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L570 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L627 - https://plugins.trac.wordpress.org/browser/sparkle-demo-importer/tags/1.4.7/sparkle-demo-importer.php#L541
CVE ID: CVE-2024-6121 State: PUBLISHED Published: 2024-07-22T19:46:11.685Z Last Updated: 2024-08-01T21:33:05.149Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: SystemLink Server, FlexLogger Problem Types: CWE-1395 Description: An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/avail
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/ni-systemlink-server-ships-out-of-date-redis-version.html
CVE ID: CVE-2024-6122 State: PUBLISHED Published: 2024-07-22T19:27:10.034Z Last Updated: 2024-08-01T21:33:04.403Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NI Products: SystemLink Server, FlexLogger Problem Types: CWE-276 Description: An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://w
this shared service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-default-directory-permissions-for-ni-systemlink-redis-service.html
CVE ID: CVE-2024-6123 State: PUBLISHED Published: 2024-07-09T07:38:45.238Z Last Updated: 2024-08-14T13:25:23.930Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: bitpressadmin Products: Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder Problem Types: CWE-434 Description: The Bit Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'iconUpload' function in all versions up to, and including, 2.13.3. This makes it possible for authenticated attackers, with administrator-level and above permissions, to upload arbitrary files on the affected
e for authenticated attackers, with administrator-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6d1b255f-d775-4bd5-892e-42bf82dd5632?source=cve - https://plugins.trac.wordpress.org/browser/bit-form/tags/2.12.2/includes/Admin/AdminAjax.php#L1176 - https://plugins.trac.wordpress.org/changeset/3114814/bit-form/trunk/includes/Admin/AdminAjax.php
CVE ID: CVE-2024-6124 State: PUBLISHED Published: 2024-07-29T13:00:33.825Z Last Updated: 2024-08-27T10:52:19.231Z Vendors: M-Files Corporation Products: Hubshare Problem Types: CWE-79 Description: Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://product.m-files.com/security-advisories/cve-2024-6124/
CVE ID: CVE-2024-6125 State: PUBLISHED Published: 2024-06-19T02:01:20.049Z Last Updated: 2024-08-01T21:33:05.158Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: glboy Products: Login with phone number Problem Types: CWE-640 Weak Password Recovery Mechanism for Forgotten Password Description: The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing a
time limit. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing a 6-digit numeric reset code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/301a67a5-226c-413a-9198-66747d1b1fd3?source=cve - https://plugins.trac.wordpress.org/changeset/3104085/login-with-phone-number#file5
CVE ID: CVE-2024-6126 State: PUBLISHED Published: 2024-07-03T14:51:17.880Z Last Updated: 2025-11-21T07:06:17.076Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-400 Description: A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:9325 - htt
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:9325 - https://access.redhat.com/security/cve/CVE-2024-6126 - https://bugzilla.redhat.com/show_bug.cgi?id=2292897
CVE ID: CVE-2024-6127 State: PUBLISHED Published: 2024-06-27T19:25:07.516Z Last Updated: 2025-09-25T18:24:57.705Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: BC Security Products: Empire Problem Types: CWE-22, CWE-434 Description: BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
ining a malicious path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://aceresponder.com/blog/exploiting-empire-c2-framework - https://github.com/ACE-Responder/Empire-C2-RCE-PoC - https://github.com/BC-SECURITY/Empire/blob/8283bbc77250232eb493bf1f9104fdd0d468962a/CHANGELOG.md?plain=1#L102 - https://vulncheck.com/advisories/empire-unauth-rce
CVE ID: CVE-2024-6128 State: PUBLISHED Published: 2024-06-18T21:00:06.633Z Last Updated: 2024-08-01T21:33:05.032Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: spa-cartcms Problem Types: CWE-841 Description: A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabilit
d remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268895. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.268895 - https://vuldb.com/?ctiid.268895 - https://seclists.org/fulldisclosure/2024/Jun/6 - https://msecureltd.blogspot.com/2024/04/friday-fun-pentest-series-5-spa.html
CVE ID: CVE-2024-6129 State: PUBLISHED Published: 2024-06-18T21:00:08.822Z Last Updated: 2024-08-19T18:08:42.112Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: spa-cartcms Problem Types: CWE-205 Description: A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may b
ttack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268896. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.268896 - https://vuldb.com/?ctiid.268896 - https://seclists.org/fulldisclosure/2024/Jun/6 - https://msecureltd.blogspot.com/2024/04/friday-fun-pentest-series-5-spa.html
CVE ID: CVE-2024-6130 State: PUBLISHED Published: 2024-07-01T06:00:01.641Z Last Updated: 2024-10-30T13:27:15.649Z Vendors: Unknown Products: Form Maker by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Form Maker by 10Web WordPress plugin before 1.15.26 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/bbed2968-4bd6-49ae-bd61-8a1f751e7041/
CVE ID: CVE-2024-6132 State: PUBLISHED Published: 2024-06-19T05:37:44.423Z Last Updated: 2024-08-01T21:33:04.596Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: raajtram Products: Pexels: Free Stock Photos Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexels_fsp_images_options_validate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's serve
nticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/79dd492e-d4da-4209-83a8-d8059263ae92?source=cve - https://plugins.trac.wordpress.org/browser/wp-pexels-free-stock-photos/trunk/settings.php#L239
CVE ID: CVE-2024-6133 State: PUBLISHED Published: 2024-08-09T06:00:02.311Z Last Updated: 2024-08-09T13:21:19.056Z Vendors: Unknown Products: wp-cart-for-digital-products Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fd613e1e-557c-4383-a3e9-4c14bc0be0c5/
CVE ID: CVE-2024-6134 State: PUBLISHED Published: 2024-08-10T06:00:04.206Z Last Updated: 2024-08-16T16:16:40.761Z Vendors: Unknown Products: wp-cart-for-digital-products Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/34d61f7e-90eb-4a64-a8a7-18f2d6518118/
CVE ID: CVE-2024-6135 State: PUBLISHED Published: 2024-09-13T19:51:31.811Z Last Updated: 2024-09-16T14:47:03.957Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-122 Description: BT:Classic: Multiple missing buf length checks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xcr5-5g98-mchp
CVE ID: CVE-2024-6136 State: PUBLISHED Published: 2024-08-09T06:00:02.952Z Last Updated: 2024-08-09T12:50:19.497Z Vendors: Unknown Products: wp-cart-for-digital-products Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7d85cfe4-4878-4530-ba78-7cfe33f3a8d5/
CVE ID: CVE-2024-6137 State: PUBLISHED Published: 2024-09-13T20:06:45.347Z Last Updated: 2025-09-17T14:09:15.467Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-121, CWE-787 Description: BT: Classic: SDP OOB access in get_att_search_list Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-pm38-7g85-cf4f
CVE ID: CVE-2024-6138 State: PUBLISHED Published: 2024-07-11T06:00:04.534Z Last Updated: 2024-08-01T21:33:05.210Z Vendors: Unknown Products: Secure Copy Content Protection and Content Locking Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerabilit
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/9ef2a8d8-39d5-45d3-95de-e7bac4b7382d/
CVE ID: CVE-2024-6139 State: PUBLISHED Published: 2024-06-27T18:45:54.046Z Last Updated: 2024-08-01T21:33:04.959Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-29 Description: A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio files to arbitrary locations on the system and enumerate file paths. The issue arises from improper validation of user-provided file paths in the `tts_to_file` endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bou
ndpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0
CVE ID: CVE-2024-6140 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:22.278Z Description: No description available.
CVE ID: CVE-2024-6141 State: PUBLISHED Published: 2024-08-21T16:10:55.914Z Last Updated: 2024-08-27T18:00:05.497Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Windscribe Products: Windscribe Problem Types: CWE-22 Description: Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windscribe Service. The issue results from the lack of proper validation of a user-supplie
ecific flaw exists within the Windscribe Service. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23441. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-820/ - https://github.com/Windscribe/Desktop-App/blob/90a5cc3c1f50f6545f83969c2ace6b4ac2c91c4e/client/common/changelog.txt#L23
CVE ID: CVE-2024-6142 State: PUBLISHED Published: 2024-06-18T23:38:49.848Z Last Updated: 2024-08-01T21:33:04.598Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Actiontec Products: WCB6200Q Problem Types: CWE-120 Description: Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copy
the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21410. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-805/
CVE ID: CVE-2024-6143 State: PUBLISHED Published: 2024-06-18T23:38:54.394Z Last Updated: 2024-08-01T21:33:05.138Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Actiontec Products: WCB6200Q Problem Types: CWE-120 Description: Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copyi
the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21414. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-806/
CVE ID: CVE-2024-6144 State: PUBLISHED Published: 2024-06-18T23:38:58.518Z Last Updated: 2024-08-01T21:33:05.371Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Actiontec Products: WCB6200Q Problem Types: CWE-121 Description: Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data pr