deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11116
Published: 2018-06-19
Description: OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed to be accessible to a specific user, as demonstrated by the file, log, and service namespaces, potentially leading to remote Information Disclosure or Code Execution. NOTE: The developer disputes this as a vulnerability, indicating that rpcd functions appropriately
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: http://blog.hac425.top/2018/05/16/openwrt_rpcd_acl_fail.html; https://forum.openwrt.org/t/rpcd-vulnerability-reported-on-vultdb/16497/3; http://blog.hac425.top/2018/05/16/openwrt_rpcd_acl_fail.html
CVE: CVE-2018-11723
Published: 2018-06-19
Description: The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/148113/libpff-2018-04-28-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/15; http://packetstormsecurity.com/files/148113/libpff-2018-04-28-Information-Disclosure.html
CVE: CVE-2018-11724
Published: 2018-06-19
Description: The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/16; http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html
CVE: CVE-2018-11725
Published: 2018-06-19
Description: The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted mobi file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/16; http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html
CVE: CVE-2018-11726
Published: 2018-06-19
Description: The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/16; http://packetstormsecurity.com/files/148114/libmobi-0.3-Information-Disclosure.html
CVE: CVE-2018-11727
Published: 2018-06-19
Description: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200, CWE-125, CWE-200
References: http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/17; http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html
CVE: CVE-2018-11728
Published: 2018-06-19
Description: The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200, CWE-125, CWE-200
References: http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/17; http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html
CVE: CVE-2018-11729
Published: 2018-06-19
Description: The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/17; http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html
CVE: CVE-2018-11730
Published: 2018-06-19
Description: The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause a denial of service (double-free) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/17; http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html
CVE: CVE-2018-11731
Published: 2018-06-19
Description: The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Jun/17; http://packetstormsecurity.com/files/148115/libfsntfs-20180420-Information-Disclosure.html
CVE: CVE-2018-12096
Published: 2018-06-19
Description: The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2018/Jun/33; http://seclists.org/fulldisclosure/2018/Jun/33
CVE: CVE-2018-12097
Published: 2018-06-19
Description: The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://seclists.org/fulldisclosure/2018/Jun/33; http://seclists.org/fulldisclosure/2018/Jun/33
CVE: CVE-2018-12098
Published: 2018-06-19
Description: The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://seclists.org/fulldisclosure/2018/Jun/33; http://seclists.org/fulldisclosure/2018/Jun/33
CVE: CVE-2018-12293
Published: 2018-06-19
Description: The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html; http://www.openwall.com/lists/oss-security/2018/06/14/1; http://www.securityfocus.com/archive/1/542087/100/0/threaded
CVE: CVE-2018-12294
Published: 2018-06-19
Description: WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.html; http://www.openwall.com/lists/oss-security/2018/06/14/1; http://www.securityfocus.com/archive/1/542087/100/0/threaded
CVE: CVE-2018-12519
Published: 2018-06-19
Description: An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/44978/; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-12588
Published: 2018-06-19
Description: Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter (aka the Search field).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forum.pkp.sfu.ca/t/ojs-3-1-1-2-and-omp-3-1-1-3-released/45937; https://forum.pkp.sfu.ca/t/xss-vulnerability-alert/45938; https://github.com/pkp/omp/commit/bfdcdec[PII_REDACTED]3282c5940a6c7896c0977bf
CVE: CVE-2018-1117
Published: 2018-06-20
Description: ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin passwords in the provisioning log. In an environment where logs are shared with other parties, this could lead to privilege escalation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-532
References: http://www.securityfocus.com/bid/104186; https://access.redhat.com/errata/RHSA-2018:1452; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1117
CVE: CVE-2018-11701
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11701; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11701
CVE: CVE-2018-11702
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11702; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11702
CVE: CVE-2018-11703
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11703; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11703
CVE: CVE-2018-11704
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11704; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11704
CVE: CVE-2018-11705
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11705; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11705
CVE: CVE-2018-11706
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11706; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11706
CVE: CVE-2018-11707
Published: 2018-06-20
Description: FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11707; https://github.com/MostafaSoliman/Security-Advisories/tree/master/CVE-2018-11707
CVE: CVE-2018-8030
Published: 2018-06-20
Description: A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041138; https://lists.apache.org/thread.html/1089a4f351a1bdca0618199e53bceeec59a10bf4e3008018d6949876%40%3Cusers.qpid.apache.org%3E; http://www.securitytracker.com/id/1041138
CVE: CVE-2018-12445
Published: 2018-06-20
Description: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in conjunction with the Android keyGenerator class is not implemented. In other words, an attacker could authenticate with an arbitrary fingerprint. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred
CVSS Score: 3.1 (LOW)
CWE: CWE-287
References: https://gist.github.com/tanprathan/0b63b1868307c732190c2ad3bd1791c7; https://gist.github.com/tanprathan/0b63b1868307c732190c2ad3bd1791c7
CVE: CVE-2018-12446
Published: 2018-06-20
Description: An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred
CVSS Score: 3.6 (LOW)
CWE: CWE-287
References: https://gist.github.com/tanprathan/97b4c04ec6af4da62929e73214fddd1b; https://gist.github.com/tanprathan/97b4c04ec6af4da62929e73214fddd1b
CVE: CVE-2018-12590
Published: 2018-06-20
Description: Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: https://hackerone.com/reports/311884; https://hackerone.com/reports/311884
CVE: CVE-2018-12591
Published: 2018-06-20
Description: Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary shell instructions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://hackerone.com/reports/313245; https://hackerone.com/reports/313245
CVE: CVE-2018-12592
Published: 2018-06-20
Description: Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn off the video using a specific option). During those seconds, a meeting invitee may unknowingly be on camera with other participants able to view.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104524; https://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-vulnerability-on-polycom-realpresence-web-suite-v-1-0.pdf; http://www.securityfocus.com/bid/104524
CVE: CVE-2018-1120
Published: 2018-06-20
Description: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVSS Score: 2.8 (LOW)
CWE: CWE-122, CWE-119
References: http://seclists.org/oss-sec/2018/q2/122; http://www.securityfocus.com/bid/104229; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2018-1132
Published: 2018-06-20
Description: A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to the component not being included in OpenDayLight in newer releases, the SDNInterface component is not packaged in the opendaylight package included in RHEL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/104238; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1132; https://jira.opendaylight.org/browse/SDNINTRFAC-14
CVE: CVE-2018-12594
Published: 2018-06-20
Description: Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.seebug.org/vuldb/ssvid-97345; https://www.seebug.org/vuldb/ssvid-97345
CVE: CVE-2018-12327
Published: 2018-06-20
Description: Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104517; https://access.redhat.com/errata/RHSA-2018:3853; https://access.redhat.com/errata/RHSA-2018:3854
CVE: CVE-2018-12558
Published: 2018-06-20
Description: The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").
CVSS Score: 7.5 (HIGH)
CWE: CWE-407
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00012.html; http://www.openwall.com/lists/oss-security/2018/06/19/3; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901873
CVE: CVE-2018-6563
Published: 2018-06-20
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for requests that (1) change user settings, (2) send emails, or (3) change contact information by leveraging lack of an anti-CSRF token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/147648/Totemomail-Encryption-Gateway-6.0.0_Build_371-Cross-Site-Request-Forgery.html; http://www.securityfocus.com/archive/1/542015/100/0/threaded; https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-003_totemo_csrf.txt
CVE: CVE-2018-9036
Published: 2018-06-20
Description: CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Jun/45; http://seclists.org/fulldisclosure/2018/Jun/45
CVE: CVE-2018-5236
Published: 2018-06-20
Description: Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362
References: http://www.securityfocus.com/bid/104198; http://www.securitytracker.com/id/1041180; https://support.symantec.com/en_US/article.SYMSA1454.html
CVE: CVE-2018-5237
Published: 2018-06-20
Description: Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/104199; http://www.securitytracker.com/id/1041180; https://support.symantec.com/en_US/article.SYMSA1454.html
CVE: CVE-2018-6211
Published: 2018-06-20
Description: On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the res_buf parameter to index.cgi.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://www.securitynewspaper.com/2018/05/25/d-link-dir-620-routers-critical-vulnerabilities/; https://securelist.com/backdoors-in-d-links-backyard/85530/; https://securityaffairs.co/wordpress/72839/hacking/d-link-dir-620-flaws.html