deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8935
Published: 2017-05-15
Description: The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8936
Published: 2017-05-15
Description: The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8937
Published: 2017-05-15
Description: The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8938
Published: 2017-05-15
Description: The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8939
Published: 2017-05-15
Description: The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8940
Published: 2017-05-15
Description: The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8941
Published: 2017-05-15
Description: The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8942
Published: 2017-05-15
Description: The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2017-8943
Published: 2017-05-15
Description: The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f
CVE: CVE-2016-5979
Published: 2017-05-15
Description: IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not accessible for the intended user. IBM X-Force ID: 116379.
CVSS Score: 2.7 (LOW)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg21999526; http://www.ibm.com/support/docview.wss?uid=swg21999526
CVE: CVE-2016-9735
Published: 2017-05-15
Description: IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22003064; http://www.ibm.com/support/docview.wss?uid=swg22003064
CVE: CVE-2016-9750
Published: 2017-05-15
Description: IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 120207.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-255
References: http://www.ibm.com/support/docview.wss?uid=swg22003137; http://www.ibm.com/support/docview.wss?uid=swg22003137
CVE: CVE-2017-7952
Published: 2017-05-16
Description: INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2017/May/55; https://www.exploit-db.com/exploits/42028/; http://seclists.org/fulldisclosure/2017/May/55
CVE: CVE-2017-7953
Published: 2017-05-16
Description: INFOR EAM V11.0 Build 201410 has XSS via comment fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/May/54; https://www.exploit-db.com/exploits/42029/; http://seclists.org/fulldisclosure/2017/May/54
CVE: CVE-2017-8382
Published: 2017-05-16
Description: admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352
References: http://en.0day.today/exploit/27771; https://github.com/Admidio/admidio/issues/612; https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc
CVE: CVE-2014-9931
Published: 2017-05-16
Description: A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9932
Published: 2017-05-16
Description: In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9933
Published: 2017-05-16
Description: Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9934
Published: 2017-05-16
Description: A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9935
Published: 2017-05-16
Description: In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9936
Published: 2017-05-16
Description: In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2014-9937
Published: 2017-05-16
Description: In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-8995
Published: 2017-05-16
Description: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-8996
Published: 2017-05-16
Description: In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-8997
Published: 2017-05-16
Description: In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-8998
Published: 2017-05-16
Description: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-8999
Published: 2017-05-16
Description: In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-9000
Published: 2017-05-16
Description: In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-9001
Published: 2017-05-16
Description: In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-9002
Published: 2017-05-16
Description: In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2015-9003
Published: 2017-05-16
Description: In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/bid/97329; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10237
Published: 2017-05-16
Description: If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/97334; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10238
Published: 2017-05-16
Description: In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97334; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10239
Published: 2017-05-16
Description: In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: http://www.securityfocus.com/bid/97334; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10242
Published: 2017-05-16
Description: A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/98555; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2016-10372
Published: 2017-05-16
Description: The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://devicereversing.wordpress.com/2016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/; https://ghostbin.com/paste/q2vq2; https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits+What+we+know+so+far/21763/
CVE: CVE-2017-6885
Published: 2017-05-16
Description: An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://secuniaresearch.flexerasoftware.com/advisories/76223/; https://secuniaresearch.flexerasoftware.com/advisories/76223/
CVE: CVE-2017-6886
Published: 2017-05-16
Description: An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3950; http://www.securityfocus.com/bid/98605; https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
CVE: CVE-2017-6887
Published: 2017-05-16
Description: A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3950; http://www.securityfocus.com/bid/98592; https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251
CVE: CVE-2017-3825
Published: 2017-05-16
Description: A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation for the size of a received ICMP packet. An attacker could exploit this vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit could allow the attacker to cause a DoS of the TelePresence endpoint, during which time calls could be dropped. This vulnerability would affect either IPv4 or IPv6 ICMP traffic. This vulnerability affects the following Cisco TelePresence products when running software release CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, or CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Quick Set Series, TelePresence SX Series. Cisco Bug IDs: CSCvb95396.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/98293; http://www.securitytracker.com/id/1038392; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ctp
CVE: CVE-2017-3873
Published: 2017-05-16
Description: A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a Cisco Application Policy Infrastructure Controller - Enterprise Module (APIC-EM) is available on the network, the attacker would need to exploit the issue in the short window before a valid PnP response was received. If successful, the attacker could gain the ability to execute arbitrary code with root privileges on the underlying operating system of the device. Cisco has confirmed that the only vulnerable software version is 8.3.102.0. Cisco Bug IDs: CSCvb42386.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/98296; http://www.securitytracker.com/id/1038394; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme
CVE: CVE-2017-3876
Published: 2017-05-16
Description: A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by repeatedly sending unauthenticated gRPC requests to the affected device. A successful exploit could allow the attacker to crash the device in such a manner that manual intervention is required to recover. This vulnerability affects all Cisco IOS XR platforms that are running release 6.1.1 of Cisco IOS XR Software when the gRPC service is enabled on the device. The gRPC service is not enabled by default. Cisco Bug IDs: CSCvb14441.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/98284; http://www.securitytracker.com/id/1038393; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ios-xr
CVE: CVE-2017-3882
Published: 2017-05-16
Description: A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service (DoS) condition. The remote code execution could occur with root privileges. The vulnerability is due to incomplete range checks of the UPnP input data, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a malicious request to the UPnP listening port of the targeted device. An exploit could allow the attacker to cause the device to reload or potentially execute arbitrary code with root privileges. This vulnerability affects all firmware releases of the Cisco CVR100W Wireless-N VPN Router prior to Firmware Release 1.0.1.22. Cisco Bug IDs: CSCuz72642.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/98287; http://www.securitytracker.com/id/1038391; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w1
CVE: CVE-2017-6079
Published: 2017-05-16
Description: The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.
CVSS Score: 9.8 (CRITICAL)
References: https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices; https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices