Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11060

Опубликовано: 29 авг. 2019
Источник: nvd
CVSS3: 7.4
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:asus:hg100_firmware:*:*:*:*:*:*:*:*
Версия до 1.05.12 (включая)
cpe:2.3:h:asus:hg100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 80%
0.01342
Низкий

7.4 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-400
CWE-770

Связанные уязвимости

github
больше 3 лет назад

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time.

EPSS

Процентиль: 80%
0.01342
Низкий

7.4 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-400
CWE-770