exploitDog

CVE-2021-41040

Опубликовано: 01 фев. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.

Ссылки

https://bugs.eclipse.org/bugs/show_bug.cgi?id=577968
Exploit
Issue Tracking
Patch
Vendor Advisory
https://github.com/eclipse/wakaama/pull/640
Patch
Third Party Advisory
https://bugs.eclipse.org/bugs/show_bug.cgi?id=577968
Exploit
Issue Tracking
Patch
Vendor Advisory
https://github.com/eclipse/wakaama/pull/640
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eclipse:wakaama:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.0119

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

GHSA-29fq-fmfp-wf37

github

около 4 лет назад

In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.

EPSS

Процентиль: 78%

0.0119

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125