deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7864
Published: 2018-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-7865
Published: 2018-03-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-7998
Published: 2018-03-09
Description: In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted image file. This occurs because of a race condition involving a failed delayed load and other worker threads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-476
References: https://github.com/jcupitt/libvips/commit/20d840e6da15c1574b3ed998bc92f91d1e36c2a5; https://github.com/jcupitt/libvips/issues/893; https://lists.debian.org/debian-lts-announce/2018/03/msg00009.html
CVE: CVE-2018-7999
Published: 2018-03-09
Description: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/silnrsi/graphite/commit/db132b4731a9b4c9534144ba3a18e65b390e9ff6; https://github.com/silnrsi/graphite/issues/22; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5F3CK2IPXFCLQZEBEEXONWIABN2E7H2/
CVE: CVE-2018-8000
Published: 2018-03-09
Description: In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted pdf file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1548918; https://sourceforge.net/p/podofo/tickets/13/; https://bugzilla.redhat.com/show_bug.cgi?id=1548918
CVE: CVE-2018-8001
Published: 2018-03-09
Description: In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1549469; https://bugzilla.redhat.com/show_bug.cgi?id=1549469
CVE: CVE-2018-8002
Published: 2018-03-09
Description: In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-835
References: https://bugzilla.redhat.com/show_bug.cgi?id=1548930; https://www.exploit-db.com/exploits/44946/; https://bugzilla.redhat.com/show_bug.cgi?id=1548930
CVE: CVE-2014-2592
Published: 2018-03-09
Description: Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2592/; https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2592/
CVE: CVE-2014-4861
Published: 2018-03-09
Description: The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://thycotic.com/products/secret-server/resources/advisories/cve-2014-4861/; http://thycotic.com/products/secret-server/resources/advisories/cve-2014-4861/
CVE: CVE-2014-6617
Published: 2018-03-09
Description: Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/128976/Softing-FG-100-PB-Hardcoded-Backdoor.html; http://www.securityfocus.com/archive/1/533902/100/0/threaded; http://www.securityfocus.com/bid/70927
CVE: CVE-2016-8612
Published: 2018-03-09
Description: Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2957.html; http://www.securityfocus.com/bid/94939; https://access.redhat.com/errata/RHSA-2017:0193
CVE: CVE-2016-9591
Published: 2018-03-09
Description: JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/94952; https://access.redhat.com/errata/RHSA-2017:1208; https://bugzilla.redhat.com/show_bug.cgi?id=1406405
CVE: CVE-2016-9606
Published: 2018-03-09
Description: JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-1255.html; http://rhn.redhat.com/errata/RHSA-2017-1409.html; http://www.securityfocus.com/bid/94940
CVE: CVE-2018-7290
Published: 2018-03-09
Description: Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2018/03/08/5; https://sourceforge.net/p/tikiwiki/code/65537; http://www.openwall.com/lists/oss-security/2018/03/08/5
CVE: CVE-2018-7536
Published: 2018-03-09
Description: An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (only one regular expression for Django 1.8.x). The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-185
References: http://www.securityfocus.com/bid/103361; https://access.redhat.com/errata/RHSA-2018:2927; https://access.redhat.com/errata/RHSA-2019:0051
CVE: CVE-2018-7537
Published: 2018-03-09
Description: An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-185
References: http://www.securityfocus.com/bid/103357; https://access.redhat.com/errata/RHSA-2018:2927; https://access.redhat.com/errata/RHSA-2019:0265
CVE: CVE-2018-7581
Published: 2018-03-09
Description: \ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-AUTHENTICATION-BYPASS.txt; http://packetstormsecurity.com/files/146697/WebLog-Expert-Web-Server-Enterprise-9.4-Weak-Permissions.html; https://www.exploit-db.com/exploits/44270/
CVE: CVE-2018-7582
Published: 2018-03-09
Description: WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt; http://packetstormsecurity.com/files/146698/WebLog-Expert-Web-Server-Enterprise-9.4-Denial-Of-Service.html; https://www.exploit-db.com/exploits/44271/
CVE: CVE-2016-8782
Published: 2018-03-09
Description: Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices repeatedly. Due to improper validation of some specific fields of the packet, the LDP processing module does not release the memory, resulting in memory leak.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-ldp-en; http://www.securityfocus.com/bid/94941; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161214-01-ldp-en
CVE: CVE-2016-8783
Published: 2018-03-09
Description: Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a stack overflow vulnerabilities. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to touchscreen drive to crash the system or escalate privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161215-01-smartphone-en; http://www.securityfocus.com/bid/94944; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161215-01-smartphone-en
CVE: CVE-2016-8784
Published: 2018-03-09
Description: Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. An unauthenticated attacker may send specific Label Distribution Protocol (LDP) packets to the devices. When the values of some parameters in the packet are abnormal, the LDP processing module does not release the memory to handle the packet, resulting in memory leak.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161221-01-ldp-en; http://www.securityfocus.com/bid/95079; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161221-01-ldp-en
CVE: CVE-2016-8785
Published: 2018-03-09
Description: Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using VRP, causing the device to display additional memory data and possibly leading to sensitive information leakage.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-04-vrp-en; http://www.securityfocus.com/bid/95149; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-04-vrp-en
CVE: CVE-2016-8786
Published: 2018-03-09
Description: Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00 have a denial of service (DoS) vulnerability. Due to the lack of input validation, a remote attacker may craft a malformed Resource Reservation Protocol (RSVP) packet and send it to the device, causing a few buffer overflows and occasional device restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-01-rsvp-en; http://www.securityfocus.com/bid/95139; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-01-rsvp-en
CVE: CVE-2017-15314
Published: 2018-03-09
Description: Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability due to memory don't be released when the XML parser process some node fail. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en
CVE: CVE-2017-15315
Published: 2018-03-09
Description: Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6500 V500R001C20SPC100, V500R001C20SPC200 has a memory leak vulnerability. An authenticated attacker could execute special commands many times, the memory leaking happened, which would cause the device to reset finally.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-command-en
CVE: CVE-2017-15323
Published: 2018-03-09
Description: Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10, eSpace U1981 V200R003C30 have a DoS vulnerability caused by memory exhaustion in some Huawei products. For lacking of adequate input validation, attackers can craft and send some malformed messages to the target device to exhaust the memory of the device and cause a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en
CVE: CVE-2017-17282
Published: 2018-03-09
Description: SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.
CVSS Score: 3.1 (LOW)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en
CVE: CVE-2018-7227
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7228
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7229
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7230
Published: 2018-03-09
Description: A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7231
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7232
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'network.ieee8021x.delete_certs'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7233
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'model_name' or 'mac_address'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7234
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7235
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7236
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7237
Published: 2018-03-09
Description: A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file'
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7238
Published: 2018-03-09
Description: A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
CVE: CVE-2018-7239
Published: 2018-03-09
Description: A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/103338; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-02; https://www.schneider-electric.com/en/download/document/SEVD-2018-060-01/
CVE: CVE-2017-18223
Published: 2018-03-10
Description: BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://communities.bmc.com/thread/165887; https://communities.bmc.com/thread/165887
CVE: CVE-2018-6311
Published: 2018-03-10
Description: One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications.
CVSS Score: 6.8 (MEDIUM)
References: https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f[PII_REDACTED]6aa4a6c8; https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f[PII_REDACTED]6aa4a6c8
CVE: CVE-2018-6312
Published: 2018-03-10
Description: A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system compromise and disclosure of user communications. The foxconn account with an 8-character lowercase alphabetic password can be used.
CVSS Score: 7.2 (HIGH)
CWE: CWE-521
References: https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f[PII_REDACTED]6aa4a6c8; https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f[PII_REDACTED]6aa4a6c8
CVE: CVE-2018-8043
Published: 2018-03-10
Description: The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5; http://www.securitytracker.com/id/1040749; https://github.com/torvalds/linux/commit/297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5