Описание
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Ссылки
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:timedoctor:timedoctor:1.4.72.3:*:*:*:pro:*:*:*
EPSS
Процентиль: 68%
0.00581
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-345
Связанные уязвимости
github
больше 3 лет назад
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
EPSS
Процентиль: 68%
0.00581
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-345