PT-2018-10626

CVE-2018-1151

·

Publicado

2018-06-12

·

Atualizado

2019-05-28

Descrição por

CVSS 2.0
10
Crítica
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Western Digital TV Media Player version 1.03.07 Western Digital TV Live Hub version 3.12.13
Description The issue allows unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to the "toServerValue.cgi" endpoint.
Recommendations For Western Digital TV Media Player version 1.03.07, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available. For Western Digital TV Live Hub version 3.12.13, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2018-1151
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com