Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-4028 State: PUBLISHED Published: 2019-05-13T15:40:35 Last Updated: 2024-08-05T05:04:28.543Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Novatek Problem Types: Incorrect Default Permissions Description: An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.
trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0700
CVE ID: CVE-2018-4029 State: PUBLISHED Published: 2019-05-13T15:42:50 Last Updated: 2024-08-05T05:04:28.416Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Novatek Problem Types: Classic Buffer Overflow Description: An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0701
CVE ID: CVE-2018-4030 State: PUBLISHED Published: 2019-03-21T15:46:08 Last Updated: 2024-08-05T05:04:28.873Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: CUJO Problem Types: 'HTTP Request Smuggling Description: An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability. Additional Analyst Notes: - CVE
pass the firewall. An attacker could send an HTTP request to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702
CVE ID: CVE-2018-4031 State: PUBLISHED Published: 2019-10-31T20:29:02 Last Updated: 2024-08-05T05:04:28.400Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: CUJO Problem Types: Improper control of generation of code Description: An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without prior sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to e
sanitization, which results in arbitrary Lua script execution in the kernel. An attacker could send an HTTP request to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0703
CVE ID: CVE-2018-4032 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.521Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0705
CVE ID: CVE-2018-4033 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.887Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0706
CVE ID: CVE-2018-4034 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.788Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0707
CVE ID: CVE-2018-4035 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.801Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0708
CVE ID: CVE-2018-4036 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.526Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0709
CVE ID: CVE-2018-4037 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.541Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access can use this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0710
CVE ID: CVE-2018-4038 State: PUBLISHED Published: 2018-12-01T18:00:00Z Last Updated: 2024-09-16T22:09:06.930Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This constructor will miscalculate a length and then use it to calculate the position to write a null byte. This can allow an attacker
r will miscalculate a length and then use it to calculate the position to write a null byte. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0711
CVE ID: CVE-2018-4039 State: PUBLISHED Published: 2018-12-01T19:00:00Z Last Updated: 2024-09-16T19:19:06.200Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References:
crafted document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0712
CVE ID: CVE-2018-4040 State: PUBLISHED Published: 2018-12-01T20:00:00Z Last Updated: 2024-09-17T00:36:10.536Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program C
m to open a specially crafted document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0713
CVE ID: CVE-2018-4041 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.556Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0715
CVE ID: CVE-2018-4042 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:29.133Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0716
CVE ID: CVE-2018-4043 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.630Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input validation. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TA
itional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0717
CVE ID: CVE-2018-4044 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.579Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0718
CVE ID: CVE-2018-4045 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.774Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0719
CVE ID: CVE-2018-4046 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:29.029Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. A user with local access can use this vulnerability to terminate a privileged helper application. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability
xploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0720
CVE ID: CVE-2018-4047 State: PUBLISHED Published: 2019-01-10T15:00:00 Last Updated: 2024-08-05T05:04:28.906Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Clean My Mac Problem Types: Improper Input Validation Description: An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0721
CVE ID: CVE-2018-4048 State: PUBLISHED Published: 2019-05-30T16:06:43 Last Updated: 2024-08-05T05:04:29.440Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: GOG Galaxy Problem Types: Arbitrary Code Execution Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_
rivileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0722
CVE ID: CVE-2018-4049 State: PUBLISHED Published: 2019-04-02T15:35:37 Last Updated: 2024-08-05T05:04:29.492Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: GOG.COM Products: GOG Galaxy Problem Types: local privilege elevation Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_r
ivileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0723
CVE ID: CVE-2018-4050 State: PUBLISHED Published: 2019-04-01T18:29:38 Last Updated: 2024-08-05T05:04:29.151Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: Talos Products: GOG Galaxy Problem Types: local privilege escalation Description: An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0724
CVE ID: CVE-2018-4051 State: PUBLISHED Published: 2019-04-02T15:19:44 Last Updated: 2024-08-05T05:04:29.501Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: GOG.COM Products: GOG Galaxy Problem Types: improper input validation Description: An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0725
CVE ID: CVE-2018-4052 State: PUBLISHED Published: 2019-04-02T15:19:41 Last Updated: 2024-08-05T05:04:28.683Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GOG.COM Products: GOG Galaxy Problem Types: improper input validation Description: An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0726
CVE ID: CVE-2018-4053 State: PUBLISHED Published: 2019-04-02T15:35:33 Last Updated: 2024-08-05T05:04:28.770Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GOG.COM Products: GOG Galaxy Problem Types: denial of service Description: An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727
CVE ID: CVE-2018-4054 State: PUBLISHED Published: 2019-03-08T20:00:00Z Last Updated: 2024-09-16T17:07:50.912Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Talos Products: Pixar Renderman Problem Types: local privilege escalation Description: A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability
this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728
CVE ID: CVE-2018-4055 State: PUBLISHED Published: 2019-03-08T20:00:00Z Last Updated: 2024-09-17T00:37:04.203Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Talos Products: Pixar Renderman Problem Types: local privilege escalation Description: A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
loit this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729
CVE ID: CVE-2018-4056 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-17T00:05:30.162Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Talos Products: coTURN Problem Types: Improper Neutralization of Special Elements used in an SQL Command Description: An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigge
the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00017.html - https://www.debian.org/security/2019/dsa-4373 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0730
CVE ID: CVE-2018-4057 State: REJECTED Published: 2019-03-11T21:00:00 Last Updated: 2019-03-11T20:57:01 Description: No description available.
CVE ID: CVE-2018-4058 State: PUBLISHED Published: 2019-03-21T14:15:36 Last Updated: 2024-08-05T05:04:28.675Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Talos Products: coTURN Problem Types: Privilege Description: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vul
tacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732
CVE ID: CVE-2018-4059 State: PUBLISHED Published: 2019-03-21T14:30:59 Last Updated: 2024-08-05T05:04:29.198Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Talos Products: coTURN Problem Types: Other Description: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server. Additional Ana
acks. An attacker who can get access to the telnet port can gain administrator access to the TURN server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0733