deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5551
Published: 2018-03-19
Description: Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/; https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/
CVE: CVE-2018-5552
Published: 2018-03-19
Description: Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".
CVSS Score: 2.9 (LOW)
CWE: CWE-760, CWE-798
References: https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/; https://blog.rapid7.com/2018/03/14/r7-2018-01-cve-2018-5551-cve-2018-5552-docutrac-office-therapy-installer-hard-coded-credentials-and-cryptographic-salt/
CVE: CVE-2018-1171
Published: 2018-03-19
Description: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20[PII_REDACTED]0803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DTrace DOF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-5106.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/104799; http://www.securitytracker.com/id/1041303
CVE: CVE-2018-1195
Published: 2018-03-19
Description: In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://www.cloudfoundry.org/blog/cve-2018-1195/; https://www.cloudfoundry.org/blog/cve-2018-1195/
CVE: CVE-2018-1196
Published: 2018-03-19
Description: Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-59
References: https://pivotal.io/security/cve-2018-1196; https://pivotal.io/security/cve-2018-1196
CVE: CVE-2018-1197
Published: 2018-03-19
Description: In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials.
CVSS Score: 8.5 (HIGH)
CWE: CWE-732
References: https://www.cloudfoundry.org/blog/cve-2018-1197/; https://www.cloudfoundry.org/blog/cve-2018-1197/
CVE: CVE-2018-1218
Published: 2018-03-19
Description: In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow condition when handling certain messages. A remote unauthenticated attacker could potentially exploit this vulnerability to cause a denial of service to the users of NetWorker systems.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Mar/43; http://www.securitytracker.com/id/1040546; https://www.exploit-db.com/exploits/44332/
CVE: CVE-2018-1221
Published: 2018-03-19
Description: In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://www.cloudfoundry.org/blog/cve-2018-1221/; https://www.cloudfoundry.org/blog/cve-2018-1221/
CVE: CVE-2018-1224
Published: 2018-03-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-1225
Published: 2018-03-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-1226
Published: 2018-03-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-8732
Published: 2018-03-19
Description: Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtual_del parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://forum.wampserver.com/read.php?2%2C138295%2C150615%2Cpage=6#msg-150615; https://www.exploit-db.com/exploits/44384/; http://forum.wampserver.com/read.php?2%2C138295%2C150615%2Cpage=6#msg-150615
CVE: CVE-2014-2274
Published: 2018-03-19
Description: Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via a request to the subscribe-to-comments-reloaded/options/index.php page to wp-admin/admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://security.dxw.com/advisories/stored-xss-and-csrf-vulnerabilities-in-subscribe-to-comments-reloaded-140129/; https://wordpress.org/plugins/subscribe-to-comments-reloaded/#developers; https://security.dxw.com/advisories/stored-xss-and-csrf-vulnerabilities-in-subscribe-to-comments-reloaded-140129/
CVE: CVE-2014-2297
Published: 2018-03-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to ls/htmlchat.php or (2) bgcolor parameter to ls/index.php.  NOTE: vector 1 may overlap CVE-2014-1906.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/531773/100/0/threaded; http://www.securityfocus.com/archive/1/531773/100/0/threaded
CVE: CVE-2014-2550
Published: 2018-03-19
Description: Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disable_comments_settings page to wp-admin/options-general.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/92219; https://security.dxw.com/advisories/csrf-in-disable-comments-1-0-3/; https://wordpress.org/plugins/disable-comments/#developers
CVE: CVE-2014-2652
Published: 2018-03-19
Description: SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://networks.unify.com/security/advisories/OBSO-1404-01.pdf; https://networks.unify.com/security/advisories/OBSO-1404-01.pdf
CVE: CVE-2014-2674
Published: 2018-03-19
Description: Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the loop parameter in an ajax_navigation action to wp-admin/admin-ajax.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://security.dxw.com/advisories/end-user-exploitable-local-file-inclusion-vulnerability-in-ajax-pagination-twitter-style-1-1/; https://security.dxw.com/advisories/end-user-exploitable-local-file-inclusion-vulnerability-in-ajax-pagination-twitter-style-1-1/
CVE: CVE-2014-2675
Published: 2018-03-19
Description: Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://security.dxw.com/advisories/csrf-vulnerability-in-wp-html-sitemap-1-2/; https://security.dxw.com/advisories/csrf-vulnerability-in-wp-html-sitemap-1-2/
CVE: CVE-2014-2884
Published: 2018-03-19
Description: The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a (1) TC_IOCTL_OPEN_TEST or (2) TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG IOCTL call.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-284
References: http://www.openwall.com/lists/oss-security/2014/04/17/7; https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf; http://www.openwall.com/lists/oss-security/2014/04/17/7
CVE: CVE-2014-2885
Published: 2018-03-19
Description: Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190, CWE-200, CWE-400
References: http://www.openwall.com/lists/oss-security/2014/04/17/7; https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf; http://www.openwall.com/lists/oss-security/2014/04/17/7
CVE: CVE-2014-4024
Published: 2018-03-19
Description: SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used with third-party Secure Sockets Layer (SSL) accelerator cards, might allow remote attackers to have unspecified impact via a timing side-channel attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/95834; https://support.f5.com/csp/article/K15500; https://exchange.xforce.ibmcloud.com/vulnerabilities/95834
CVE: CVE-2014-5443
Published: 2018-03-19
Description: Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2014/08/24/3; http://www.securityfocus.com/bid/69360; https://exchange.xforce.ibmcloud.com/vulnerabilities/95458
CVE: CVE-2014-5450
Published: 2018-03-19
Description: Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137158.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-September/137232.html; http://www.openwall.com/lists/oss-security/2014/08/25/1
CVE: CVE-2018-5233
Published: 2018-03-19
Description: Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2018/03/15/1; https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/; http://www.openwall.com/lists/oss-security/2018/03/15/1
CVE: CVE-2018-7262
Published: 2018-03-19
Description: In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tracker.ceph.com/issues/23039; https://access.redhat.com/errata/RHSA-2018:0546; https://access.redhat.com/errata/RHSA-2018:0548
CVE: CVE-2018-7445
Published: 2018-03-19
Description: A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://seclists.org/fulldisclosure/2018/Mar/38; http://www.securityfocus.com/bid/103427; https://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow
CVE: CVE-2018-8804
Published: 2018-03-20
Description: WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/103498; https://github.com/ImageMagick/ImageMagick/issues/1025; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE: CVE-2018-8805
Published: 2018-03-20
Description: Yxcms building system (compatible cell phone) v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extend_guestbook.php or protected\apps\default\view\mobile\extend_guestbook.php in an index.php?r=default/column/index&col=guestbook request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/QQ704568679/YXcms-Code-audit/blob/master/Yxcms%20Code%20audit; https://github.com/QQ704568679/YXcms-Code-audit/blob/master/Yxcms%20Code%20audit
CVE: CVE-2018-8806
Published: 2018-03-20
Description: In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/libming/libming/issues/128; https://github.com/libming/libming/issues/128
CVE: CVE-2018-8807
Published: 2018-03-20
Description: In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/libming/libming/issues/129; https://github.com/libming/libming/issues/129
CVE: CVE-2018-8808
Published: 2018-03-20
Description: In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/9725; https://github.com/radare/radare2/issues/9725
CVE: CVE-2018-8809
Published: 2018-03-20
Description: In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/9726; https://github.com/radare/radare2/issues/9726
CVE: CVE-2018-8810
Published: 2018-03-20
Description: In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/9727; https://github.com/radare/radare2/issues/9727
CVE: CVE-2018-8811
Published: 2018-03-20
Description: Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users to upload different kind of content artifacts (SVG, .doc, .docx). The uploaded content is stored in the CMS content repository "as is". In case of scripts inside an SVG, this may or may not be "malicious", there is no way of knowing if the uploaded SVG contains the script for a reason. To exploit the "issue", a user must have an account in the CMS as a content manager
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/alkacon/opencms-core/issues/586; https://www.exploit-db.com/exploits/44391/; https://github.com/alkacon/opencms-core/issues/586
CVE: CVE-2018-8815
Published: 2018-03-20
Description: Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or HTML via a malicious SVG image.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/alkacon/opencms-core/issues/587; https://www.exploit-db.com/exploits/44392/; https://github.com/alkacon/opencms-core/issues/587
CVE: CVE-2018-8821
Published: 2018-03-20
Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/bigric3/poc; https://github.com/bigric3/poc
CVE: CVE-2017-14191
Published: 2018-03-20
Description: An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/103430; https://fortiguard.com/advisory/FG-IR-17-279; http://www.securityfocus.com/bid/103430
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-20
Description: GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local network's DNS servers, while on VPN. This vulnerability appears to have been fixed in Some Ubuntu 16.04 packages were fixed, but later updates removed the fix. cf. https://bugs.launchpad.net/ubuntu/+bug/1754671 an upstream fix does not appear to be available at this time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00005.html; http://www.securityfocus.com/bid/103478; https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1754671
CVE: CVE-2017-17668
Published: 2018-03-20
Description: Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf; https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf
CVE: CVE-2018-4844
Published: 2018-03-20
Description: A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions < V3.15.10). Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache folders within the app's sandbox on the same mobile device. This includes HMI project cache folders of other configured WinCC OA servers. The security vulnerability could be exploited by an attacker who tricks an app user to connect to an attacker-controlled WinCC OA server. Successful exploitation requires user interaction and read/write access to the app's folder on a mobile device. The vulnerability could allow reading data from and writing data to the app's folder. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284, CWE-269
References: http://www.securityfocus.com/bid/103475; https://cert-portal.siemens.com/productcert/pdf/ssa-822928.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-081-01
CVE: CVE-2018-5717
Published: 2018-03-20
Description: Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf; https://www.ncr.com/sites/default/files/ncr_security_alert_-_2018-04_v3.pdf
CVE: CVE-2017-17215
Published: 2018-03-20
Description: Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en; http://www.securityfocus.com/bid/102344; http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en
CVE: CVE-2017-17306
Published: 2018-03-20
Description: Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-arrayover-en
CVE: CVE-2017-17307
Published: 2018-03-20
Description: Some Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read vulnerability. Due to the lack string terminator of string, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds and possibly cause the device abnormal.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-read-en