PT-2018-9529
CVE-2018-1000804
·
تاريخ النشر
2018-10-08
·
تاريخ التحديث
2019-09-27
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
contiki-ng version 4
Description
The issue is related to a Buffer Overflow in the AQL database engine, which can lead to Remote Code Execution on devices using the Contiki-NG operating system. This can be exploited by running malicious AQL code, for example, through a SQL-like Injection attack.
Recommendations
For contiki-ng version 4, consider disabling the AQL database engine or restricting the execution of AQL code until a patch is available. Avoid using potentially malicious AQL code in the affected database engine to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾