CWE Code: 119
Vulnerability Type: sql_injection
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: contiki-ng version 4 contains a buffer overflow vulnerability in aql (antelope query language) database engine that can result in attacker can perform remote code execution on device using contiki-ng operating system. this attack appear to be exploitable via attacker must be able to run malicious aql code (e.g. via sql-like injection attack).
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-10-08
Last Modified Date: 2019-09-27