CVE-2019-15513

Опубликовано: 23 авг. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openwrt:libuci:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:motorola:cx2l_mwr04l_firmware:1.01:*:*:*:*:*:*:*

cpe:2.3:h:motorola:cx2l_mwr04l:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:motorola:c1_mwr03_firmware:1.01:*:*:*:*:*:*:*

cpe:2.3:h:motorola:c1_mwr03:-:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00484

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-667

Связанные уязвимости

GHSA-hwg2-2rxq-2xm4

github

больше 3 лет назад

An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.