Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ility and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0585
CVE ID: CVE-2018-3922 State: PUBLISHED Published: 2018-08-01T15:00:00Z Last Updated: 2024-09-17T02:01:21.480Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Computerinsel Products: Computerinsel Photoline Problem Types: heap-based buffer overflow Description: A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligenc
ility and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0586
CVE ID: CVE-2018-3923 State: PUBLISHED Published: 2018-08-01T15:00:00Z Last Updated: 2024-09-16T22:02:56.854Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Computerinsel Products: Computerinsel Photoline Problem Types: out of bounds write Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintellige
ity and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0587
CVE ID: CVE-2018-3924 State: PUBLISHED Published: 2018-08-01T20:00:00Z Last Updated: 2024-09-17T02:36:25.121Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can
malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041353 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0588
CVE ID: CVE-2018-3925 State: PUBLISHED Published: 2018-08-23T15:00:00Z Last Updated: 2024-09-16T20:31:58.309Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Buffer copy without checking size Description: An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP serv
emote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0591
CVE ID: CVE-2018-3926 State: PUBLISHED Published: 2018-08-28T17:00:00Z Last Updated: 2024-09-17T00:46:06.691Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Talos Products: Samsung Problem Types: Integer Underflow Description: An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite loop, which eventually causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Not
causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105162 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0593
CVE ID: CVE-2018-3927 State: PUBLISHED Published: 2018-08-27T15:00:00Z Last Updated: 2024-09-16T18:03:25.721Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Samsung Products: Samsung Problem Types: Classic Buffer Overflow Description: An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order t
ervice, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0594
CVE ID: CVE-2018-3928 State: PUBLISHED Published: 2018-11-01T15:00:00Z Last Updated: 2024-09-16T20:58:52.752Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Yi Products: Yi Technology Problem Types: Reversible One-Way Hash Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0595
CVE ID: CVE-2018-3929 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-17T00:16:05.708Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: out of bounds write Description: An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted PowerPoint (PPT) document can lead to heap corruption, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
l Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0596
CVE ID: CVE-2018-3930 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-16T19:14:42.565Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: out of bounds write Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbgetfp` method. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0597
CVE ID: CVE-2018-3931 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-17T03:37:29.802Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: out of bounds write Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `putShapeProperty` method. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0598
CVE ID: CVE-2018-3932 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-16T16:54:07.605Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: stack buffer overflow Description: An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to a stack-based buffer overflow, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligenc
in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0599
CVE ID: CVE-2018-3933 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-17T01:26:20.381Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: stack-based buffer overflow Description: An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312). A crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `vbputanld` method. Additional Analyst Notes: - CVE Program Container
e code execution. This vulnerability occurs in the `vbputanld` method. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0600
CVE ID: CVE-2018-3934 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T04:57:24.458Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: unknown Products: Yi Technology Problem Types: code execution Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports
ty. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0601
CVE ID: CVE-2018-3935 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T04:57:24.449Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: unknown Products: Yi Technology Problem Types: Uncontrolled Resource Consumption Description: An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
l Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0602
CVE ID: CVE-2018-3936 State: PUBLISHED Published: 2018-07-11T16:00:00Z Last Updated: 2024-09-17T03:14:11.681Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Antenna House Products: Antenna House Problem Types: stack-based buffer overflow Description: In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0603
CVE ID: CVE-2018-3937 State: PUBLISHED Published: 2018-08-14T19:00:00Z Last Updated: 2024-09-16T16:13:19.122Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: Sony Problem Types: command injection Description: An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604
CVE ID: CVE-2018-3938 State: PUBLISHED Published: 2018-08-14T19:00:00Z Last Updated: 2024-09-16T18:08:43.570Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: Sony Problem Types: buffer overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vuln
s vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605
CVE ID: CVE-2018-3939 State: PUBLISHED Published: 2018-08-01T20:00:00Z Last Updated: 2024-09-16T23:36:30.101Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigg
file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0606
CVE ID: CVE-2018-3940 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-16T18:29:55.405Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused. An attacker needs to trick the user to open the malicious file to trigger. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talos
ditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0607
CVE ID: CVE-2018-3941 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-16T17:03:48.539Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
er to open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0608
CVE ID: CVE-2018-3942 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-17T02:17:13.379Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0609
CVE ID: CVE-2018-3943 State: PUBLISHED Published: 2018-10-02T21:00:00Z Last Updated: 2024-09-16T22:52:14.971Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can
malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0610
CVE ID: CVE-2018-3944 State: PUBLISHED Published: 2018-10-02T21:00:00Z Last Updated: 2024-09-17T01:51:32.930Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can
malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0611
CVE ID: CVE-2018-3945 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-16T18:02:48.699Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
er to open the malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0612
CVE ID: CVE-2018-3946 State: PUBLISHED Published: 2018-10-03T15:00:00Z Last Updated: 2024-09-17T02:05:45.152Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious
open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0613
CVE ID: CVE-2018-3947 State: PUBLISHED Published: 2018-11-01T15:00:00Z Last Updated: 2024-09-16T21:57:21.602Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Yi Products: Yi Technology Problem Types: Cleartext Transmission of Sensitive Information Description: An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0616
CVE ID: CVE-2018-3948 State: PUBLISHED Published: 2018-11-30T17:00:00Z Last Updated: 2024-09-17T04:13:43.613Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: TP-Link Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticated or authenticated web request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintel
quest to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0617
CVE ID: CVE-2018-3949 State: PUBLISHED Published: 2018-12-01T03:00:00Z Last Updated: 2024-09-17T01:01:34.084Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Talos Products: TP-Link Problem Types: path traversal Description: An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnera